// File: /workspace/github_cpp_makefile_star2_O2/goodix[P]gdix_hid_firmware_update/gtx8/gtx8_update.cpp
// Function: GTx8Update::fw_update(unsigned int)
int GTx8Update::fw_update(unsigned int firmware_flag)
{
	int retry;
	int ret, i;
	unsigned char temp_buf[65];
	unsigned char *fw_data = NULL;
	unsigned char buf_switch_to_patch[] = {0x00, 0x10, 0x00, 0x00, 0x01, 0x01};
	unsigned char buf_start_update[] = {0x00, 0x11, 0x00, 0x00, 0x01, 0x01};
	unsigned char buf_restart[] = {0x0E, 0x13, 0x00, 0x00, 0x01, 0x01};
	unsigned char buf_switch_ptp_mode[] = {0x03, 0x03, 0x00, 0x00, 0x01, 0x01};

	int sub_fw_num = 0;
	unsigned char sub_fw_type;
	unsigned int sub_fw_len;
	unsigned int sub_fw_flash_addr;
	unsigned int sub_fw_info_pos =
		image->GetFirmwareSubFwInfoOffset(); // SUB_FW_INFO_OFFSET;
	unsigned int fw_image_offset =
		image->GetFirmwareSubFwDataOffset(); // SUB_FW_DATA_OFFSET;

	/* close report */
	ret = this->DisableReport();
	if (ret < 0)
		return ret;

	ret = dev->Write(buf_switch_to_patch, sizeof(buf_switch_to_patch));
	if (ret < 0) {
		gdix_err("Failed switch to patch\n");
		goto update_err;
	}

	usleep(250000);
	retry = GDIX_RETRY_TIMES;
	do {
		ret = dev->Read(BL_STATE_ADDR, temp_buf, 1);
		gdix_dbg("BL_STATE_ADDR:0x%x\n", BL_STATE_ADDR);
		if (ret < 0) {
			gdix_err("Failed read 0x%x, ret = %d\n", BL_STATE_ADDR, ret);
			goto update_err;
		}
		if (temp_buf[0] == 0xDD)
			break;
		gdix_info("0x%x value is 0x%x != 0xDD, retry\n", BL_STATE_ADDR,
				  temp_buf[0]);
		usleep(30000);
	} while (--retry);

	if (!retry) {
		gdix_err("Reg 0x%x != 0xDD\n", BL_STATE_ADDR);
		ret = -2;
		goto update_err;
	}

	ret = this->DisableReport();
	if (ret < 0)
		goto update_err;

	/* Start update */
	ret = dev->Write(buf_start_update, sizeof(buf_start_update));
	if (ret < 0) {
		gdix_err("Failed start update, ret=%d\n", ret);
		goto update_err;
	}
	usleep(100000);

	/* Start load firmware */
	fw_data = image->GetFirmwareData();
	if (!fw_data) {
		gdix_err("No valid fw data \n");
		ret = -4;
		goto update_err;
	}

	sub_fw_num =
		image->GetFirmwareSubFwNum(); // fw_data[FW_IMAGE_SUB_FWNUM_OFFSET];
	sub_fw_info_pos =
		image->GetFirmwareSubFwInfoOffset(); // SUB_FW_INFO_OFFSET;
	fw_image_offset =
		image->GetFirmwareSubFwDataOffset(); // SUB_FW_DATA_OFFSET;
	gdix_dbg("load sub firmware, sub_fw_num=%d\n", sub_fw_num);
	if (sub_fw_num == 0)
		return -5;

	/* load normal firmware package */
	for (i = 0; i < sub_fw_num; i++) {
		sub_fw_type = fw_data[sub_fw_info_pos];
		gdix_dbg("load sub firmware, sub_fw_type=0x%x\n", sub_fw_type);
		sub_fw_len = (fw_data[sub_fw_info_pos + 1] << 24) |
					 (fw_data[sub_fw_info_pos + 2] << 16) |
					 (fw_data[sub_fw_info_pos + 3] << 8) |
					 fw_data[sub_fw_info_pos + 4];

		sub_fw_flash_addr =
			(fw_data[sub_fw_info_pos + 5] << 8) | fw_data[sub_fw_info_pos + 6];
		sub_fw_flash_addr = sub_fw_flash_addr << 8;
		if (!(firmware_flag & (0x01 << sub_fw_type))) {
			gdix_info("Sub firmware type does not math:type=%d\n", sub_fw_type);
			fw_image_offset += sub_fw_len;
			sub_fw_info_pos += 8;
			continue;
		}

		/* if sub fw type is HID subsystem we need compare version before update
		 */
		// TODO update hid subsystem
		gdix_dbg("load sub firmware addr:0x%x,len:0x%x\n", sub_fw_flash_addr,
				 sub_fw_len);
		ret = load_sub_firmware(sub_fw_flash_addr, &fw_data[fw_image_offset],
								sub_fw_len);
		if (ret < 0) {
			gdix_dbg("Failed load sub firmware, ret=%d\n", ret);
			goto update_err;
		}
		fw_image_offset += sub_fw_len;
		sub_fw_info_pos += 8;
	}

	/* flash config with isp if NEED_UPDATE_CONFIG_WITH_ISP flag is setted or
	 * hid subsystem updated.
	 */
	if (image->GetUpdateFlag() & NEED_UPDATE_CONFIG_WITH_ISP) {
		this->is_cfg_flashed_with_isp = true;
		ret = flash_cfg_with_isp();
		if (ret < 0) {
			gdix_err("failed flash config with isp, ret %d\n", ret);
			goto update_err;
		}
	}

	/* reset IC */
	gdix_dbg("reset ic\n");
	retry = 3;
	do {
		ret = dev->Write(buf_restart, sizeof(buf_restart));
		if (ret >= 0)
			break;
		usleep(20000);
	} while (--retry);
	if (retry == 0 && ret < 0)
		gdix_dbg("Failed write restart command, ret=%d\n", ret);
	else
		ret = 0;

	usleep(300000);

	if (dev->WriteSpeCmd(buf_switch_ptp_mode, sizeof(buf_switch_ptp_mode)) <
		0) {
		gdix_err("Failed switch to ptp mode\n");
	}
	return ret;

update_err:
	/* reset IC */
	gdix_dbg("reset ic\n");
	retry = 3;
	do {
		if (dev->Write(buf_restart, sizeof(buf_restart)) >= 0)
			break;
		usleep(20000);
	} while (--retry);
	if (retry == 0 && ret < 0)
		gdix_dbg("Failed write restart command, ret=%d\n", ret);

	usleep(300000);
	if (dev->WriteSpeCmd(buf_switch_ptp_mode, sizeof(buf_switch_ptp_mode)) <
		0) {
		gdix_err("Failed switch to ptp mode\n");
	}
	return ret;
}

// Assembly:
pushq %rbp
pushq %r15
pushq %r14
pushq %r13
pushq %r12
pushq %rbx
subq $0x88, %rsp
movl %esi, %r14d
movq %rdi, %rbp
movw $0x101, %ax             # imm = 0x101
movw %ax, 0x3c(%rsp)
movl $0x1000, 0x38(%rsp)     # imm = 0x1000
movw %ax, 0x34(%rsp)
movl $0x1100, 0x30(%rsp)     # imm = 0x1100
movw %ax, 0x1c(%rsp)
movl $0x130e, 0x18(%rsp)     # imm = 0x130E
movw %ax, 0x14(%rsp)
movl $0x303, 0x10(%rsp)      # imm = 0x303
movq 0x10(%rdi), %rdi
movq (%rdi), %rax
callq *0x60(%rax)
movq 0x10(%rbp), %rdi
movq (%rdi), %rax
callq *0x68(%rax)
movq %rbp, %rdi
callq 0xd9d0
testl %eax, %eax
js 0xdd26
movq 0x8(%rbp), %rdi
movq (%rdi), %rax
leaq 0x38(%rsp), %rsi
pushq $0x6
popq %rdx
callq *0x38(%rax)
testl %eax, %eax
js 0xdd2d
movl %r14d, 0x2c(%rsp)
movl $0x3d090, %edi          # imm = 0x3D090
callq 0x5170
pushq $-0x6
popq %r12
leaq 0x40(%rsp), %r14
pushq $0x1
popq %r15
leaq 0xa594(%rip), %r13      # 0x181d6
movq 0x8(%rbp), %rdi
movq (%rdi), %rax
movl $0x5095, %esi           # imm = 0x5095
movq %r14, %rdx
movl %r15d, %ecx
callq *0x20(%rax)
movl %eax, %ebx
leaq 0x12631(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xdc8b
movq 0x1234c(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x8572(%rip), %rsi      # 0x161e8
movq %r13, %rdx
movl $0xc3, %ecx
movl $0x5095, %r8d           # imm = 0x5095
xorl %eax, %eax
callq 0x5180
testl %ebx, %ebx
js 0xdd68
movzbl 0x40(%rsp), %r9d
cmpl $0xdd, %r9d
je 0xddaa
leaq 0x125e4(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xdcd8
movq 0x122ff(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x8577(%rip), %rsi      # 0x1623a
movq %r13, %rdx
movl $0xcb, %ecx
movl $0x5095, %r8d           # imm = 0x5095
xorl %eax, %eax
callq 0x5180
movl $0x7530, %edi           # imm = 0x7530
callq 0x5170
incl %r12d
jne 0xdc42
pushq $-0x2
popq %rbx
leaq 0x1259c(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe175
movq 0x122d3(%rip), %rax     # 0x1ffd8
movq (%rax), %rdi
leaq 0x855f(%rip), %rsi      # 0x1626e
leaq 0xa4c0(%rip), %rdx      # 0x181d6
movl $0xd0, %ecx
movl $0x5095, %r8d           # imm = 0x5095
jmp 0xdfd7
movl %eax, %ebx
jmp 0xe22c
movl %eax, %ebx
leaq 0x1255b(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe175
movq 0x12292(%rip), %rax     # 0x1ffd8
movq (%rax), %rdi
leaq 0x8449(%rip), %rsi      # 0x16199
leaq 0xa47f(%rip), %rdx      # 0x181d6
movl $0xbb, %ecx
xorl %eax, %eax
callq 0x5180
jmp 0xe175
leaq 0x12522(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe175
movq 0x12259(%rip), %rax     # 0x1ffd8
movq (%rax), %rdi
leaq 0x8484(%rip), %rsi      # 0x1620d
leaq 0xa446(%rip), %rdx      # 0x181d6
movl $0xc5, %ecx
movl $0x5095, %r8d           # imm = 0x5095
movl %ebx, %r9d
xorl %eax, %eax
callq 0x5180
jmp 0xe175
movq %rbp, %rdi
callq 0xd9d0
testl %eax, %eax
js 0xdf9e
movq 0x8(%rbp), %rdi
movq (%rdi), %rax
leaq 0x30(%rsp), %rsi
pushq $0x6
popq %rdx
callq *0x38(%rax)
testl %eax, %eax
js 0xdfa5
movl $0x186a0, %edi          # imm = 0x186A0
callq 0x5170
movq 0x10(%rbp), %rdi
movq (%rdi), %rax
callq *0x38(%rax)
testq %rax, %rax
je 0xdfe3
movq %rax, %r15
movq 0x10(%rbp), %rdi
movq (%rdi), %rax
callq *0x58(%rax)
movl %eax, %r12d
movq 0x10(%rbp), %rdi
movq (%rdi), %rax
callq *0x60(%rax)
movl %eax, %r13d
movq %rbp, 0x20(%rsp)
movq 0x10(%rbp), %rdi
movq (%rdi), %rax
callq *0x68(%rax)
movl %eax, %ebp
leaq 0x1246b(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xde52
movq 0x12186(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x84a7(%rip), %rsi      # 0x162e3
leaq 0xa393(%rip), %rdx      # 0x181d6
movl $0xef, %ecx
movl %r12d, %r8d
xorl %eax, %eax
callq 0x5180
testl %r12d, %r12d
je 0xe0df
xorl %eax, %eax
testl %r12d, %r12d
cmovlel %eax, %r12d
addl $0x6, %r13d
subl $0x1, %r12d
jb 0xe018
movl %ebp, 0xc(%rsp)
leal -0x6(%r13), %eax
movl %eax, %eax
movzbl (%r15,%rax), %ebx
leaq 0x12409(%rip), %rax     # 0x20291
cmpb $0x0, (%rax)
je 0xdeb4
movq 0x12124(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x8478(%rip), %rsi      # 0x16316
leaq 0xa331(%rip), %rdx      # 0x181d6
movl $0xf6, %ecx
movl %ebx, %r8d
xorl %eax, %eax
callq 0x5180
leal -0x5(%r13), %eax
movzbl (%r15,%rax), %eax
shll $0x18, %eax
leal -0x4(%r13), %ecx
movzbl (%r15,%rcx), %ecx
shll $0x10, %ecx
orl %eax, %ecx
leal -0x3(%r13), %eax
movzbl (%r15,%rax), %eax
shll $0x8, %eax
orl %ecx, %eax
leal -0x2(%r13), %ecx
movzbl (%r15,%rcx), %r14d
orl %eax, %r14d
movl 0x2c(%rsp), %eax
btl %ebx, %eax
leaq 0x1239b(%rip), %rax     # 0x20291
movb (%rax), %al
jae 0xdf63
leal -0x1(%r13), %ecx
movzbl (%r15,%rcx), %ecx
movl %r13d, %edx
movzbl (%r15,%rdx), %ebx
shll $0x10, %ecx
shll $0x8, %ebx
orl %ecx, %ebx
testb %al, %al
je 0xdf41
movq 0x1209a(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x845e(%rip), %rsi      # 0x16386
leaq 0xa2a7(%rip), %rdx      # 0x181d6
movl $0x10a, %ecx            # imm = 0x10A
movl %ebx, %r8d
movl %r14d, %r9d
xorl %eax, %eax
callq 0x5180
movl 0xc(%rsp), %ebp
movl %ebp, %edx
addq %r15, %rdx
movq 0x20(%rsp), %rdi
movq (%rdi), %rax
movl %ebx, %esi
movl %r14d, %ecx
callq *0x28(%rax)
testl %eax, %eax
jns 0xdf92
jmp 0xe0e7
testb %al, %al
movl 0xc(%rsp), %ebp
je 0xdf92
movq 0x12046(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x83d0(%rip), %rsi      # 0x1634c
leaq 0xa253(%rip), %rdx      # 0x181d6
movl $0x100, %ecx            # imm = 0x100
movl %ebx, %r8d
xorl %eax, %eax
callq 0x5180
addl %r14d, %ebp
addl $0x8, %r13d
jmp 0xde68
movl %eax, %ebx
jmp 0xe175
movl %eax, %ebx
leaq 0x122e3(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe175
movq 0x1201a(%rip), %rax     # 0x1ffd8
movq (%rax), %rdi
leaq 0x82c9(%rip), %rsi      # 0x16291
leaq 0xa207(%rip), %rdx      # 0x181d6
movl $0xdc, %ecx
movl %ebx, %r8d
xorl %eax, %eax
callq 0x5180
jmp 0xe175
pushq $-0x4
popq %rbx
leaq 0x122a4(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe175
movq 0x11fdb(%rip), %rax     # 0x1ffd8
movq (%rax), %rdi
leaq 0x82b8(%rip), %rsi      # 0x162bf
leaq 0xa1c8(%rip), %rdx      # 0x181d6
movl $0xe4, %ecx
jmp 0xdd5c
movq 0x20(%rsp), %rbp
movq 0x10(%rbp), %rdi
movq (%rdi), %rax
callq *0xa8(%rax)
testb $0x10, %al
je 0xe044
movb $0x1, 0x1a(%rbp)
movq (%rbp), %rax
movq %rbp, %rdi
callq *0x40(%rax)
testl %eax, %eax
js 0xe163
leaq 0x12246(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe074
movq 0x11f61(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x83f2(%rip), %rsi      # 0x16453
leaq 0xa16e(%rip), %rdx      # 0x181d6
movl $0x122, %ecx            # imm = 0x122
xorl %eax, %eax
callq 0x5180
pushq $-0x3
popq %r12
leaq 0x18(%rsp), %r14
pushq $0x6
popq %r15
movq 0x8(%rbp), %rdi
movq (%rdi), %rax
movq %r14, %rsi
movl %r15d, %edx
callq *0x38(%rax)
testl %eax, %eax
jns 0xe123
movl %eax, %ebx
movl $0x4e20, %edi           # imm = 0x4E20
callq 0x5170
incl %r12d
jne 0xe081
leaq 0x121e0(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe125
movq 0x11efb(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x83a7(%rip), %rsi      # 0x1646e
leaq 0xa108(%rip), %rdx      # 0x181d6
movl $0x12b, %ecx            # imm = 0x12B
movl %ebx, %r8d
xorl %eax, %eax
callq 0x5180
jmp 0xe125
pushq $-0x5
popq %rbx
jmp 0xe22c
movl %eax, %ebx
leaq 0x121a1(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
jne 0xe11c
movq 0x11ebc(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x82b7(%rip), %rsi      # 0x163bd
leaq 0xa0c9(%rip), %rdx      # 0x181d6
movl $0x10e, %ecx            # imm = 0x10E
movl %ebx, %r8d
xorl %eax, %eax
callq 0x5180
movq 0x20(%rsp), %rbp
jmp 0xe175
xorl %ebx, %ebx
movl $0x493e0, %edi          # imm = 0x493E0
callq 0x5170
movq 0x8(%rbp), %rdi
movq (%rdi), %rax
leaq 0x10(%rsp), %rsi
pushq $0x6
popq %rdx
callq *0x40(%rax)
testl %eax, %eax
jns 0xe22c
leaq 0x12141(%rip), %rax     # 0x20291
cmpb $0x0, (%rax)
je 0xe22c
movl $0x133, %ecx            # imm = 0x133
jmp 0xe245
movl %eax, %ebx
leaq 0x12125(%rip), %rax     # 0x20291
cmpb $0x1, (%rax)
je 0xe266
leaq 0x12115(%rip), %r12     # 0x20291
cmpb $0x1, (%r12)
jne 0xe1a7
movq 0x11e2e(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x82bf(%rip), %rsi      # 0x16453
leaq 0xa03b(%rip), %rdx      # 0x181d6
movl $0x139, %ecx            # imm = 0x139
xorl %eax, %eax
callq 0x5180
pushq $-0x3
popq %r13
leaq 0x18(%rsp), %r14
pushq $0x6
popq %r15
movq 0x8(%rbp), %rdi
movq (%rdi), %rax
movq %r14, %rsi
movl %r15d, %edx
callq *0x38(%rax)
testl %eax, %eax
jns 0xe205
movl $0x4e20, %edi           # imm = 0x4E20
callq 0x5170
incl %r13d
jne 0xe1b4
cmpb $0x1, (%r12)
jne 0xe205
movq 0x11dd3(%rip), %rax     # 0x1ffb8
movq (%rax), %rdi
leaq 0x827f(%rip), %rsi      # 0x1646e
leaq 0x9fe0(%rip), %rdx      # 0x181d6
movl $0x141, %ecx            # imm = 0x141
movl %ebx, %r8d
xorl %eax, %eax
callq 0x5180
movl $0x493e0, %edi          # imm = 0x493E0
callq 0x5170
movq 0x8(%rbp), %rdi
movq (%rdi), %rax
leaq 0x10(%rsp), %rsi
pushq $0x6
popq %rdx
callq *0x40(%rax)
testl %eax, %eax
jns 0xe22c
cmpb $0x1, (%r12)
je 0xe240
movl %ebx, %eax
addq $0x88, %rsp
popq %rbx
popq %r12
popq %r13
popq %r14
popq %r15
popq %rbp
retq
movl $0x146, %ecx            # imm = 0x146
movq 0x11d8c(%rip), %rax     # 0x1ffd8
movq (%rax), %rdi
leaq 0x824f(%rip), %rsi      # 0x164a5
leaq 0x9f79(%rip), %rdx      # 0x181d6
xorl %eax, %eax
callq 0x5180
jmp 0xe22c
movq 0x11d6b(%rip), %rax     # 0x1ffd8
movq (%rax), %rdi
leaq 0x8179(%rip), %rsi      # 0x163f0
leaq 0x9f58(%rip), %rdx      # 0x181d6
movl $0x11c, %ecx            # imm = 0x11C
jmp 0xdfd4