	.file	"605088.c"
	.intel_syntax noprefix
	.text
	.globl	ZM_All11N_AP
	.bss
	.align 4
	.type	ZM_All11N_AP, @object
	.size	ZM_All11N_AP, 4
ZM_All11N_AP:
	.zero	4
	.globl	ZM_BSS_INFO_VALID_BIT
	.align 4
	.type	ZM_BSS_INFO_VALID_BIT, @object
	.size	ZM_BSS_INFO_VALID_BIT, 4
ZM_BSS_INFO_VALID_BIT:
	.zero	4
	.globl	ZM_LV_0
	.align 4
	.type	ZM_LV_0, @object
	.size	ZM_LV_0, 4
ZM_LV_0:
	.zero	4
	.globl	ZM_LV_1
	.align 4
	.type	ZM_LV_1, @object
	.size	ZM_LV_1, 4
ZM_LV_1:
	.zero	4
	.globl	ZM_MAX_COUNTRY_INFO_SIZE
	.align 4
	.type	ZM_MAX_COUNTRY_INFO_SIZE, @object
	.size	ZM_MAX_COUNTRY_INFO_SIZE, 4
ZM_MAX_COUNTRY_INFO_SIZE:
	.zero	4
	.globl	ZM_MAX_IE_SIZE
	.align 4
	.type	ZM_MAX_IE_SIZE, @object
	.size	ZM_MAX_IE_SIZE, 4
ZM_MAX_IE_SIZE:
	.zero	4
	.globl	ZM_MAX_PROBE_FRAME_BODY_SIZE
	.align 4
	.type	ZM_MAX_PROBE_FRAME_BODY_SIZE, @object
	.size	ZM_MAX_PROBE_FRAME_BODY_SIZE, 4
ZM_MAX_PROBE_FRAME_BODY_SIZE:
	.zero	4
	.globl	ZM_MAX_SSID_LENGTH
	.align 4
	.type	ZM_MAX_SSID_LENGTH, @object
	.size	ZM_MAX_SSID_LENGTH, 4
ZM_MAX_SSID_LENGTH:
	.zero	4
	.globl	ZM_MAX_SUPP_RATES_IE_SIZE
	.align 4
	.type	ZM_MAX_SUPP_RATES_IE_SIZE, @object
	.size	ZM_MAX_SUPP_RATES_IE_SIZE, 4
ZM_MAX_SUPP_RATES_IE_SIZE:
	.zero	4
	.globl	ZM_MAX_WPS_IE_SIZE
	.align 4
	.type	ZM_MAX_WPS_IE_SIZE, @object
	.size	ZM_MAX_WPS_IE_SIZE, 4
ZM_MAX_WPS_IE_SIZE:
	.zero	4
	.globl	ZM_SECURITY_TYPE_CENC
	.align 8
	.type	ZM_SECURITY_TYPE_CENC, @object
	.size	ZM_SECURITY_TYPE_CENC, 8
ZM_SECURITY_TYPE_CENC:
	.zero	8
	.globl	ZM_SECURITY_TYPE_NONE
	.align 8
	.type	ZM_SECURITY_TYPE_NONE, @object
	.size	ZM_SECURITY_TYPE_NONE, 8
ZM_SECURITY_TYPE_NONE:
	.zero	8
	.globl	ZM_SECURITY_TYPE_WPA
	.align 8
	.type	ZM_SECURITY_TYPE_WPA, @object
	.size	ZM_SECURITY_TYPE_WPA, 8
ZM_SECURITY_TYPE_WPA:
	.zero	8
	.globl	ZM_SuperG_AP
	.align 4
	.type	ZM_SuperG_AP, @object
	.size	ZM_SuperG_AP, 4
ZM_SuperG_AP:
	.zero	4
	.globl	ZM_WIRELESS_MODE_24_11
	.align 4
	.type	ZM_WIRELESS_MODE_24_11, @object
	.size	ZM_WIRELESS_MODE_24_11, 4
ZM_WIRELESS_MODE_24_11:
	.zero	4
	.globl	ZM_WIRELESS_MODE_24_54
	.align 4
	.type	ZM_WIRELESS_MODE_24_54, @object
	.size	ZM_WIRELESS_MODE_24_54, 4
ZM_WIRELESS_MODE_24_54:
	.zero	4
	.globl	ZM_WIRELESS_MODE_24_N
	.align 4
	.type	ZM_WIRELESS_MODE_24_N, @object
	.size	ZM_WIRELESS_MODE_24_N, 4
ZM_WIRELESS_MODE_24_N:
	.zero	4
	.globl	ZM_WIRELESS_MODE_5_54
	.align 4
	.type	ZM_WIRELESS_MODE_5_54, @object
	.size	ZM_WIRELESS_MODE_5_54, 4
ZM_WIRELESS_MODE_5_54:
	.zero	4
	.globl	ZM_WIRELESS_MODE_5_N
	.align 4
	.type	ZM_WIRELESS_MODE_5_N, @object
	.size	ZM_WIRELESS_MODE_5_N, 4
ZM_WIRELESS_MODE_5_N:
	.zero	4
	.globl	ZM_WLAN_EID_CENC_IE
	.align 4
	.type	ZM_WLAN_EID_CENC_IE, @object
	.size	ZM_WLAN_EID_CENC_IE, 4
ZM_WLAN_EID_CENC_IE:
	.zero	4
	.globl	ZM_WLAN_EID_COUNTRY
	.align 4
	.type	ZM_WLAN_EID_COUNTRY, @object
	.size	ZM_WLAN_EID_COUNTRY, 4
ZM_WLAN_EID_COUNTRY:
	.zero	4
	.globl	ZM_WLAN_EID_DS
	.align 4
	.type	ZM_WLAN_EID_DS, @object
	.size	ZM_WLAN_EID_DS, 4
ZM_WLAN_EID_DS:
	.zero	4
	.globl	ZM_WLAN_EID_ERP
	.align 4
	.type	ZM_WLAN_EID_ERP, @object
	.size	ZM_WLAN_EID_ERP, 4
ZM_WLAN_EID_ERP:
	.zero	4
	.globl	ZM_WLAN_EID_EXTENDED_HT_CAPABILITY
	.align 4
	.type	ZM_WLAN_EID_EXTENDED_HT_CAPABILITY, @object
	.size	ZM_WLAN_EID_EXTENDED_HT_CAPABILITY, 4
ZM_WLAN_EID_EXTENDED_HT_CAPABILITY:
	.zero	4
	.globl	ZM_WLAN_EID_EXTENDED_RATE
	.align 4
	.type	ZM_WLAN_EID_EXTENDED_RATE, @object
	.size	ZM_WLAN_EID_EXTENDED_RATE, 4
ZM_WLAN_EID_EXTENDED_RATE:
	.zero	4
	.globl	ZM_WLAN_EID_HT_CAPABILITY
	.align 4
	.type	ZM_WLAN_EID_HT_CAPABILITY, @object
	.size	ZM_WLAN_EID_HT_CAPABILITY, 4
ZM_WLAN_EID_HT_CAPABILITY:
	.zero	4
	.globl	ZM_WLAN_EID_IBSS
	.align 4
	.type	ZM_WLAN_EID_IBSS, @object
	.size	ZM_WLAN_EID_IBSS, 4
ZM_WLAN_EID_IBSS:
	.zero	4
	.globl	ZM_WLAN_EID_RSN_IE
	.align 4
	.type	ZM_WLAN_EID_RSN_IE, @object
	.size	ZM_WLAN_EID_RSN_IE, 4
ZM_WLAN_EID_RSN_IE:
	.zero	4
	.globl	ZM_WLAN_EID_SSID
	.align 4
	.type	ZM_WLAN_EID_SSID, @object
	.size	ZM_WLAN_EID_SSID, 4
ZM_WLAN_EID_SSID:
	.zero	4
	.globl	ZM_WLAN_EID_SUPPORT_RATE
	.align 4
	.type	ZM_WLAN_EID_SUPPORT_RATE, @object
	.size	ZM_WLAN_EID_SUPPORT_RATE, 4
ZM_WLAN_EID_SUPPORT_RATE:
	.zero	4
	.globl	ZM_WLAN_EID_VENDOR_PRIVATE
	.align 4
	.type	ZM_WLAN_EID_VENDOR_PRIVATE, @object
	.size	ZM_WLAN_EID_VENDOR_PRIVATE, 4
ZM_WLAN_EID_VENDOR_PRIVATE:
	.zero	4
	.globl	ZM_WLAN_EID_WPA_IE
	.align 4
	.type	ZM_WLAN_EID_WPA_IE, @object
	.size	ZM_WLAN_EID_WPA_IE, 4
ZM_WLAN_EID_WPA_IE:
	.zero	4
	.globl	ZM_WLAN_PREN2_EID_HTCAPABILITY
	.align 4
	.type	ZM_WLAN_PREN2_EID_HTCAPABILITY, @object
	.size	ZM_WLAN_PREN2_EID_HTCAPABILITY, 4
ZM_WLAN_PREN2_EID_HTCAPABILITY:
	.zero	4
	.globl	ZM_WLAN_PREN2_EID_HTINFORMATION
	.align 4
	.type	ZM_WLAN_PREN2_EID_HTINFORMATION, @object
	.size	ZM_WLAN_PREN2_EID_HTINFORMATION, 4
ZM_WLAN_PREN2_EID_HTINFORMATION:
	.zero	4
	.globl	ZM_XR_AP
	.align 4
	.type	ZM_XR_AP, @object
	.size	ZM_XR_AP, 4
ZM_XR_AP:
	.zero	4
	.globl	wd
	.align 8
	.type	wd, @object
	.size	wd, 8
wd:
	.zero	8
	.section	.rodata
.LC0:
	.string	"EID(SSID) not found"
.LC1:
	.string	"EID(SSID) is invalid"
.LC2:
	.string	"Abnormal DS Param Set IE"
	.align 8
.LC3:
	.string	"probersp frameBodysize abnormal"
	.align 8
.LC4:
	.string	"EID(supported rates) not found"
	.align 8
.LC5:
	.string	"Supported rates IE length abnormal"
	.align 8
.LC6:
	.string	"Extended rates IE length abnormal"
	.text
	.globl	zfStaInitBssInfo
	.type	zfStaInitBssInfo, @function
zfStaInitBssInfo:
.LFB0:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 96
	mov	QWORD PTR -56[rbp], rdi
	mov	QWORD PTR -64[rbp], rsi
	mov	QWORD PTR -72[rbp], rdx
	mov	QWORD PTR -80[rbp], rcx
	mov	QWORD PTR -88[rbp], r8
	mov	DWORD PTR -92[rbp], r9d
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -24[rbp], 0
	mov	DWORD PTR -28[rbp], 0
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zmw_get_wlan_dev@PLT
	cmp	DWORD PTR -92[rbp], 1
	jne	.L2
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR [rax]
	mov	eax, DWORD PTR ZM_BSS_INFO_VALID_BIT[rip]
	and	eax, edx
	test	eax, eax
	jne	.L84
.L2:
	mov	edx, DWORD PTR ZM_WLAN_EID_SSID[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	jne	.L4
	lea	rdi, .LC0[rip]
	call	zm_debug_msg0@PLT
	jmp	.L5
.L4:
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	mov	DWORD PTR -40[rbp], 0
	lea	rdx, -40[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	zfwGetShowZeroLengthSSID@PLT
	mov	eax, DWORD PTR -40[rbp]
	test	eax, eax
	je	.L6
	mov	eax, DWORD PTR ZM_MAX_SSID_LENGTH[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L7
	lea	rdi, .LC1[rip]
	call	zm_debug_msg0@PLT
	jmp	.L5
.L6:
	cmp	DWORD PTR -36[rbp], 0
	je	.L9
	mov	eax, DWORD PTR ZM_MAX_SSID_LENGTH[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L7
.L9:
	lea	rdi, .LC1[rip]
	call	zm_debug_msg0@PLT
	jmp	.L5
.L7:
	mov	eax, DWORD PTR -36[rbp]
	lea	edi, 2[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 8[rax]
	mov	ecx, DWORD PTR -20[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	mov	edx, DWORD PTR ZM_WLAN_EID_DS[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L83
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	cmp	DWORD PTR -36[rbp], 1
	je	.L12
	mov	eax, DWORD PTR ZM_LV_0[rip]
	lea	rsi, .LC2[rip]
	mov	edi, eax
	call	zm_msg0_mm@PLT
	jmp	.L5
.L12:
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 2[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -16[rbp], eax
	mov	ecx, DWORD PTR -16[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	edx, 0
	mov	esi, ecx
	mov	rdi, rax
	call	zfChNumToFreq@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -56[rbp]
	mov	esi, edx
	mov	rdi, rax
	call	zfHpIsAllowedChannel@PLT
	test	rax, rax
	je	.L85
	mov	ecx, DWORD PTR -16[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	edx, 0
	mov	esi, ecx
	mov	rdi, rax
	call	zfChNumToFreq@PLT
	mov	rdx, QWORD PTR -80[rbp]
	mov	DWORD PTR 16[rdx], eax
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR -16[rbp]
	mov	DWORD PTR 20[rax], edx
	jmp	.L15
.L83:
	mov	rax, QWORD PTR wd[rip]
	mov	edx, DWORD PTR 8[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 16[rax], edx
	mov	rax, QWORD PTR wd[rip]
	mov	eax, DWORD PTR 8[rax]
	lea	rdx, -40[rbp]
	mov	rsi, rdx
	mov	edi, eax
	call	zfChFreqToNum@PLT
	mov	rdx, QWORD PTR -80[rbp]
	mov	DWORD PTR 20[rdx], eax
.L15:
	mov	rdx, QWORD PTR ZM_SECURITY_TYPE_NONE[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	QWORD PTR 168[rax], rdx
	mov	DWORD PTR -32[rbp], 0
	jmp	.L16
.L17:
	mov	rax, QWORD PTR -72[rbp]
	mov	rdx, QWORD PTR 32[rax]
	mov	eax, DWORD PTR -32[rbp]
	cdqe
	sal	rax, 2
	lea	rcx, [rdx+rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 200[rax]
	mov	eax, DWORD PTR -32[rbp]
	cdqe
	sal	rax, 2
	add	rdx, rax
	mov	eax, DWORD PTR [rcx]
	mov	DWORD PTR [rdx], eax
	add	DWORD PTR -32[rbp], 1
.L16:
	cmp	DWORD PTR -32[rbp], 5
	jle	.L17
	mov	DWORD PTR -32[rbp], 0
	jmp	.L18
.L19:
	mov	rax, QWORD PTR -72[rbp]
	mov	rdx, QWORD PTR 24[rax]
	mov	eax, DWORD PTR -32[rbp]
	cdqe
	sal	rax, 2
	lea	rcx, [rdx+rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 192[rax]
	mov	eax, DWORD PTR -32[rbp]
	cdqe
	sal	rax, 2
	add	rdx, rax
	mov	eax, DWORD PTR [rcx]
	mov	DWORD PTR [rdx], eax
	add	DWORD PTR -32[rbp], 1
.L18:
	cmp	DWORD PTR -32[rbp], 5
	jle	.L19
	mov	DWORD PTR -32[rbp], 0
	jmp	.L20
.L21:
	mov	rax, QWORD PTR -72[rbp]
	mov	rdx, QWORD PTR 16[rax]
	mov	eax, DWORD PTR -32[rbp]
	cdqe
	sal	rax, 2
	lea	rcx, [rdx+rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 184[rax]
	mov	eax, DWORD PTR -32[rbp]
	cdqe
	sal	rax, 2
	add	rdx, rax
	mov	eax, DWORD PTR [rcx]
	mov	DWORD PTR [rdx], eax
	add	DWORD PTR -32[rbp], 1
.L20:
	cmp	DWORD PTR -32[rbp], 7
	jle	.L21
	mov	rax, QWORD PTR -72[rbp]
	mov	rdx, QWORD PTR 8[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 176[rax]
	mov	edx, DWORD PTR [rdx]
	mov	DWORD PTR [rax], edx
	mov	rax, QWORD PTR -72[rbp]
	mov	rax, QWORD PTR 8[rax]
	mov	rdx, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 176[rdx]
	add	rdx, 4
	mov	eax, DWORD PTR 4[rax]
	mov	DWORD PTR [rdx], eax
	mov	rax, QWORD PTR -72[rbp]
	mov	rdx, QWORD PTR [rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 24[rax]
	mov	edx, DWORD PTR [rdx]
	mov	DWORD PTR [rax], edx
	mov	rax, QWORD PTR -72[rbp]
	mov	rax, QWORD PTR [rax]
	mov	rdx, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 24[rdx]
	add	rdx, 4
	mov	eax, DWORD PTR 4[rax]
	mov	DWORD PTR [rdx], eax
	mov	DWORD PTR -20[rbp], 36
	mov	rdx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	zfwBufGetSize@PLT
	sub	eax, DWORD PTR -20[rbp]
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	eax, DWORD PTR ZM_MAX_PROBE_FRAME_BODY_SIZE[rip]
	cmp	edx, eax
	jl	.L22
	mov	eax, DWORD PTR ZM_MAX_PROBE_FRAME_BODY_SIZE[rip]
	lea	edx, -1[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
.L22:
	mov	DWORD PTR -28[rbp], 0
.L24:
	mov	edx, DWORD PTR -20[rbp]
	mov	eax, DWORD PTR -28[rbp]
	add	eax, edx
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	add	eax, 2
	mov	DWORD PTR -24[rbp], eax
	cmp	DWORD PTR -24[rbp], 1
	jle	.L23
	mov	edx, DWORD PTR -28[rbp]
	mov	eax, DWORD PTR -24[rbp]
	add	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 32[rax]
	cmp	edx, eax
	jg	.L23
	mov	edx, DWORD PTR -20[rbp]
	mov	eax, DWORD PTR -28[rbp]
	lea	ecx, [rdx+rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 40[rax]
	mov	eax, DWORD PTR -28[rbp]
	cdqe
	sal	rax, 3
	add	rdx, rax
	mov	edi, DWORD PTR -24[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	mov	eax, DWORD PTR -24[rbp]
	add	DWORD PTR -28[rbp], eax
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 32[rax]
	cmp	DWORD PTR -28[rbp], eax
	jl	.L24
	jmp	.L25
.L23:
	mov	eax, DWORD PTR ZM_LV_1[rip]
	lea	rsi, .LC3[rip]
	mov	edi, eax
	call	zm_msg0_mm@PLT
	nop
.L25:
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR -28[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	edx, DWORD PTR ZM_WLAN_EID_SUPPORT_RATE[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	jne	.L26
	lea	rdi, .LC4[rip]
	call	zm_debug_msg0@PLT
	jmp	.L5
.L26:
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	cmp	DWORD PTR -36[rbp], 0
	je	.L27
	mov	eax, DWORD PTR ZM_MAX_SUPP_RATES_IE_SIZE[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L28
.L27:
	mov	eax, DWORD PTR ZM_LV_0[rip]
	lea	rsi, .LC5[rip]
	mov	edi, eax
	call	zm_msg0_mm@PLT
	jmp	.L5
.L28:
	mov	eax, DWORD PTR -36[rbp]
	lea	edi, 2[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 48[rax]
	mov	ecx, DWORD PTR -20[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	mov	edx, DWORD PTR ZM_WLAN_EID_COUNTRY[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L29
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	mov	eax, DWORD PTR ZM_MAX_COUNTRY_INFO_SIZE[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L30
	mov	eax, DWORD PTR ZM_MAX_COUNTRY_INFO_SIZE[rip]
	mov	DWORD PTR -36[rbp], eax
.L30:
	mov	eax, DWORD PTR -36[rbp]
	lea	edi, 2[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 56[rax]
	mov	ecx, DWORD PTR -20[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	mov	rax, QWORD PTR wd[rip]
	mov	rax, QWORD PTR 16[rax]
	test	rax, rax
	je	.L29
	mov	rax, QWORD PTR -80[rbp]
	lea	rcx, 56[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	edx, 3
	mov	rsi, rcx
	mov	rdi, rax
	call	zfHpGetRegulationTablefromISO@PLT
	mov	rax, QWORD PTR wd[rip]
	mov	QWORD PTR 16[rax], 0
.L29:
	mov	edx, DWORD PTR ZM_WLAN_EID_ERP[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L31
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 2[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	rdx, QWORD PTR -80[rbp]
	mov	DWORD PTR 64[rdx], eax
.L31:
	mov	edx, DWORD PTR ZM_WLAN_EID_EXTENDED_RATE[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L32
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	mov	eax, DWORD PTR ZM_MAX_SUPP_RATES_IE_SIZE[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L33
	mov	eax, DWORD PTR ZM_LV_0[rip]
	lea	rsi, .LC6[rip]
	mov	edi, eax
	call	zm_msg0_mm@PLT
	jmp	.L5
.L33:
	mov	eax, DWORD PTR -36[rbp]
	lea	edi, 2[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 72[rax]
	mov	ecx, DWORD PTR -20[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	jmp	.L34
.L32:
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 72[rax]
	mov	QWORD PTR [rax], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 72[rax]
	add	rax, 8
	mov	QWORD PTR [rax], 0
.L34:
	mov	edx, DWORD PTR ZM_WLAN_EID_WPA_IE[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L35
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	mov	eax, DWORD PTR ZM_MAX_IE_SIZE[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L36
	mov	eax, DWORD PTR ZM_MAX_IE_SIZE[rip]
	mov	DWORD PTR -36[rbp], eax
.L36:
	mov	eax, DWORD PTR -36[rbp]
	lea	edi, 2[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 80[rax]
	mov	ecx, DWORD PTR -20[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	mov	rdx, QWORD PTR ZM_SECURITY_TYPE_WPA[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	QWORD PTR 168[rax], rdx
	jmp	.L37
.L35:
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 80[rax]
	add	rax, 8
	mov	QWORD PTR [rax], 0
.L37:
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	ecx, 255
	mov	edx, 4
	mov	rdi, rax
	call	zfFindWifiElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L38
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	mov	eax, DWORD PTR ZM_MAX_WPS_IE_SIZE[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L39
	mov	eax, DWORD PTR ZM_MAX_WPS_IE_SIZE[rip]
	mov	DWORD PTR -36[rbp], eax
.L39:
	mov	eax, DWORD PTR -36[rbp]
	lea	edi, 2[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 88[rax]
	mov	ecx, DWORD PTR -20[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	jmp	.L40
.L38:
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 88[rax]
	add	rax, 8
	mov	QWORD PTR [rax], 0
.L40:
	mov	edx, DWORD PTR ZM_WLAN_EID_VENDOR_PRIVATE[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindSuperGElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L41
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 160[rax]
	mov	eax, DWORD PTR ZM_SuperG_AP[rip]
	or	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 160[rax], edx
.L41:
	mov	edx, DWORD PTR ZM_WLAN_EID_VENDOR_PRIVATE[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindXRElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L42
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 160[rax]
	mov	eax, DWORD PTR ZM_XR_AP[rip]
	or	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 160[rax], edx
.L42:
	mov	edx, DWORD PTR ZM_WLAN_EID_RSN_IE[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L43
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	DWORD PTR -36[rbp], eax
	mov	eax, DWORD PTR ZM_MAX_IE_SIZE[rip]
	cmp	DWORD PTR -36[rbp], eax
	jle	.L44
	mov	eax, DWORD PTR ZM_MAX_IE_SIZE[rip]
	mov	DWORD PTR -36[rbp], eax
.L44:
	mov	eax, DWORD PTR -36[rbp]
	lea	edi, 2[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 96[rax]
	mov	ecx, DWORD PTR -20[rbp]
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfCopyFromRxBuffer@PLT
	mov	rdx, QWORD PTR ZM_SECURITY_TYPE_WPA[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	QWORD PTR 168[rax], rdx
	jmp	.L45
.L43:
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 96[rax]
	add	rax, 8
	mov	QWORD PTR [rax], 0
.L45:
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	ecx, 1
	mov	edx, 2
	mov	rdi, rax
	call	zfFindWifiElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L46
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 8[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 128
	mov	DWORD PTR -12[rbp], eax
	mov	eax, DWORD PTR -12[rbp]
	or	eax, 1
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 112[rax], edx
	jmp	.L47
.L46:
	mov	rsi, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	ecx, 0
	mov	edx, 2
	mov	rdi, rax
	call	zfFindWifiElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L48
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 8[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 128
	mov	DWORD PTR -12[rbp], eax
	mov	eax, DWORD PTR -12[rbp]
	or	eax, 1
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 112[rax], edx
	jmp	.L47
.L48:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 112[rax], 0
.L47:
	mov	edx, DWORD PTR ZM_WLAN_EID_HT_CAPABILITY[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L49
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 116[rax], 1
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 2
	test	eax, eax
	je	.L50
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 1
	jmp	.L51
.L50:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 0
.L51:
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 1[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 64
	test	eax, eax
	je	.L52
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 124[rax], 1
	jmp	.L53
.L52:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 124[rax], 0
	jmp	.L53
.L49:
	mov	edx, DWORD PTR ZM_WLAN_PREN2_EID_HTCAPABILITY[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L54
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 116[rax], 1
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 160[rax]
	mov	eax, DWORD PTR ZM_All11N_AP[rip]
	or	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 160[rax], edx
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 2[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 2
	test	eax, eax
	je	.L55
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 1
	jmp	.L56
.L55:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 0
.L56:
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 2[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 64
	test	eax, eax
	je	.L57
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 124[rax], 1
	jmp	.L53
.L57:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 124[rax], 0
	jmp	.L53
.L54:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 116[rax], 0
.L53:
	mov	edx, DWORD PTR ZM_WLAN_EID_EXTENDED_HT_CAPABILITY[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L58
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 2[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 3
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 128[rax], edx
	jmp	.L59
.L58:
	mov	edx, DWORD PTR ZM_WLAN_PREN2_EID_HTINFORMATION[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L60
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 3[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	and	eax, 3
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 128[rax], edx
	jmp	.L59
.L60:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 128[rax], 0
.L59:
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 120[rax]
	cmp	eax, 1
	jne	.L61
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 128[rax]
	cmp	eax, 1
	je	.L61
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 128[rax]
	cmp	eax, 3
	je	.L61
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 0
.L61:
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 120[rax]
	cmp	eax, 1
	jne	.L62
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 16[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 128[rax]
	cmp	eax, 1
	jne	.L63
	mov	eax, 20
	jmp	.L64
.L63:
	mov	eax, -20
.L64:
	add	edx, eax
	mov	rax, QWORD PTR -56[rbp]
	mov	esi, edx
	mov	rdi, rax
	call	zfHpIsAllowedChannel@PLT
	test	rax, rax
	jne	.L62
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 116[rax], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 128[rax], 0
.L62:
	mov	edx, DWORD PTR ZM_WLAN_EID_EXTENDED_HT_CAPABILITY[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L65
	mov	rdx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	zfFindBrdcmMrvlRlnkExtCap@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	jne	.L65
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 132[rax], 1
	jmp	.L66
.L65:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 132[rax], 0
.L66:
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 116[rax]
	cmp	eax, 1
	jne	.L67
	mov	rdx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	zfFindBroadcomExtCap@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L67
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 136[rax], 1
	jmp	.L68
.L67:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 136[rax], 0
.L68:
	mov	rdx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	zfFindMarvelExtCap@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L69
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 140[rax], 1
	jmp	.L70
.L69:
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 140[rax], 0
.L70:
	mov	edx, DWORD PTR ZM_WLAN_EID_IBSS[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L71
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 2[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readh@PLT
	mov	rdx, QWORD PTR -80[rbp]
	mov	DWORD PTR 164[rdx], eax
.L71:
	mov	rax, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR 16[rax]
	cmp	eax, 3000
	jle	.L72
	mov	rax, QWORD PTR wd[rip]
	mov	edx, DWORD PTR [rax]
	mov	eax, DWORD PTR ZM_WIRELESS_MODE_5_N[rip]
	and	eax, edx
	test	eax, eax
	jne	.L73
	mov	rax, QWORD PTR wd[rip]
	mov	edx, DWORD PTR [rax]
	mov	eax, DWORD PTR ZM_WIRELESS_MODE_5_54[rip]
	and	eax, edx
	test	eax, eax
	je	.L86
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 116[rax], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 160[rax]
	mov	eax, DWORD PTR ZM_All11N_AP[rip]
	not	eax
	and	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 160[rax], edx
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 128[rax], 0
	mov	ecx, DWORD PTR ZM_WLAN_EID_HT_CAPABILITY[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	ecx, DWORD PTR ZM_WLAN_PREN2_EID_HTCAPABILITY[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	ecx, DWORD PTR ZM_WLAN_EID_EXTENDED_HT_CAPABILITY[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	ecx, DWORD PTR ZM_WLAN_PREN2_EID_HTINFORMATION[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	jmp	.L73
.L72:
	mov	rax, QWORD PTR wd[rip]
	mov	edx, DWORD PTR [rax]
	mov	eax, DWORD PTR ZM_WIRELESS_MODE_24_N[rip]
	and	eax, edx
	test	eax, eax
	jne	.L73
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 116[rax], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 120[rax], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 160[rax]
	mov	eax, DWORD PTR ZM_All11N_AP[rip]
	not	eax
	and	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 160[rax], edx
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 128[rax], 0
	mov	ecx, DWORD PTR ZM_WLAN_EID_HT_CAPABILITY[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	ecx, DWORD PTR ZM_WLAN_PREN2_EID_HTCAPABILITY[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	ecx, DWORD PTR ZM_WLAN_EID_EXTENDED_HT_CAPABILITY[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	ecx, DWORD PTR ZM_WLAN_PREN2_EID_HTINFORMATION[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	rax, QWORD PTR wd[rip]
	mov	edx, DWORD PTR [rax]
	mov	eax, DWORD PTR ZM_WIRELESS_MODE_24_54[rip]
	and	eax, edx
	test	eax, eax
	jne	.L73
	mov	rax, QWORD PTR wd[rip]
	mov	edx, DWORD PTR [rax]
	mov	eax, DWORD PTR ZM_WIRELESS_MODE_24_11[rip]
	and	eax, edx
	test	eax, eax
	je	.L87
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 48[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	ecx, DWORD PTR 16[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	esi, ecx
	mov	rdi, rax
	call	zfIsGOnlyMode@PLT
	test	rax, rax
	jne	.L88
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 72[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	ecx, DWORD PTR 16[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	esi, ecx
	mov	rdi, rax
	call	zfIsGOnlyMode@PLT
	test	rax, rax
	jne	.L88
	mov	rax, QWORD PTR -80[rbp]
	mov	rdx, QWORD PTR 72[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rcx, QWORD PTR 48[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfGatherBMode@PLT
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 64[rax], 0
	mov	ecx, DWORD PTR ZM_WLAN_EID_ERP[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	ecx, DWORD PTR ZM_WLAN_EID_EXTENDED_RATE[rip]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfRemoveElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
	mov	rax, QWORD PTR -80[rbp]
	mov	rcx, QWORD PTR 48[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 32[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rsi, QWORD PTR 40[rax]
	mov	rax, QWORD PTR -56[rbp]
	mov	rdi, rax
	call	zfUpdateElement@PLT
	mov	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 32[rax], edx
.L73:
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR [rax]
	mov	eax, DWORD PTR ZM_BSS_INFO_VALID_BIT[rip]
	or	edx, eax
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR [rax], edx
	jmp	.L3
.L84:
	nop
.L3:
	mov	rax, QWORD PTR wd[rip]
	mov	edx, DWORD PTR 4[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 156[rax], edx
	mov	edx, DWORD PTR ZM_WLAN_EID_ERP[rip]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zfFindElement@PLT
	mov	DWORD PTR -20[rbp], eax
	cmp	DWORD PTR -20[rbp], 65535
	je	.L78
	mov	eax, DWORD PTR -20[rbp]
	lea	edx, 2[rax]
	mov	rcx, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR -56[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	zmw_rx_buf_readb@PLT
	mov	rdx, QWORD PTR -80[rbp]
	mov	DWORD PTR 64[rdx], eax
.L78:
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 144[rax]
	mov	rax, QWORD PTR -88[rbp]
	mov	eax, DWORD PTR [rax]
	cmp	edx, eax
	jge	.L79
	mov	rax, QWORD PTR -88[rbp]
	mov	edx, DWORD PTR [rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 144[rax], edx
	mov	rax, QWORD PTR -88[rbp]
	mov	eax, DWORD PTR [rax]
	lea	edx, [rax+rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	DWORD PTR 148[rax], edx
	mov	rax, QWORD PTR -80[rbp]
	mov	edi, DWORD PTR 144[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	ecx, DWORD PTR 120[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, DWORD PTR 116[rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 48[rax]
	add	rax, 48
	mov	rsi, QWORD PTR [rax]
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR 72[rax]
	mov	rax, QWORD PTR [rax]
	add	rsi, rax
	mov	rax, QWORD PTR -56[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	zfComputeBssInfoWeightValue@PLT
	mov	rdx, QWORD PTR -80[rbp]
	mov	DWORD PTR 152[rdx], eax
.L79:
	mov	eax, 0
	jmp	.L81
.L5:
	mov	eax, 1
	jmp	.L81
.L85:
	nop
	jmp	.L14
.L86:
	nop
	jmp	.L14
.L87:
	nop
	jmp	.L14
.L88:
	nop
.L14:
	mov	eax, 2
.L81:
	mov	rdi, QWORD PTR -8[rbp]
	sub	rdi, QWORD PTR fs:40
	je	.L82
	call	__stack_chk_fail@PLT
.L82:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE0:
	.size	zfStaInitBssInfo, .-zfStaInitBssInfo
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"605088.c"
	.text
	.comm	ZM_All11N_AP,4,4
	.comm	ZM_BSS_INFO_VALID_BIT,4,4
	.comm	ZM_LV_0,4,4
	.comm	ZM_LV_1,4,4
	.comm	ZM_MAX_COUNTRY_INFO_SIZE,4,4
	.comm	ZM_MAX_IE_SIZE,4,4
	.comm	ZM_MAX_PROBE_FRAME_BODY_SIZE,4,4
	.comm	ZM_MAX_SSID_LENGTH,4,4
	.comm	ZM_MAX_SUPP_RATES_IE_SIZE,4,4
	.comm	ZM_MAX_WPS_IE_SIZE,4,4
	.comm	ZM_SECURITY_TYPE_CENC,4,4
	.comm	ZM_SECURITY_TYPE_NONE,4,4
	.comm	ZM_SECURITY_TYPE_WPA,4,4
	.comm	ZM_SuperG_AP,4,4
	.comm	ZM_WIRELESS_MODE_24_11,4,4
	.comm	ZM_WIRELESS_MODE_24_54,4,4
	.comm	ZM_WIRELESS_MODE_24_N,4,4
	.comm	ZM_WIRELESS_MODE_5_54,4,4
	.comm	ZM_WIRELESS_MODE_5_N,4,4
	.comm	ZM_WLAN_EID_CENC_IE,4,4
	.comm	ZM_WLAN_EID_COUNTRY,4,4
	.comm	ZM_WLAN_EID_DS,4,4
	.comm	ZM_WLAN_EID_ERP,4,4
	.comm	ZM_WLAN_EID_EXTENDED_HT_CAPABILITY,4,4
	.comm	ZM_WLAN_EID_EXTENDED_RATE,4,4
	.comm	ZM_WLAN_EID_HT_CAPABILITY,4,4
	.comm	ZM_WLAN_EID_IBSS,4,4
	.comm	ZM_WLAN_EID_RSN_IE,4,4
	.comm	ZM_WLAN_EID_SSID,4,4
	.comm	ZM_WLAN_EID_SUPPORT_RATE,4,4
	.comm	ZM_WLAN_EID_VENDOR_PRIVATE,4,4
	.comm	ZM_WLAN_EID_WPA_IE,4,4
	.comm	ZM_WLAN_PREN2_EID_HTCAPABILITY,4,4
	.comm	ZM_WLAN_PREN2_EID_HTINFORMATION,4,4
	.comm	ZM_XR_AP,4,4
	.comm	wd,4,4
	.section	.rodata
	.align	2
.LC0:
	.ascii	"EID(SSID) not found\000"
	.align	2
.LC1:
	.ascii	"EID(SSID) is invalid\000"
	.align	2
.LC2:
	.ascii	"Abnormal DS Param Set IE\000"
	.align	2
.LC3:
	.ascii	"probersp frameBodysize abnormal\000"
	.align	2
.LC4:
	.ascii	"EID(supported rates) not found\000"
	.align	2
.LC5:
	.ascii	"Supported rates IE length abnormal\000"
	.align	2
.LC6:
	.ascii	"Extended rates IE length abnormal\000"
	.align	2
.LC7:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	zfStaInitBssInfo
	.syntax unified
	.arm
	.fpu softvfp
	.type	zfStaInitBssInfo, %function
zfStaInitBssInfo:
	@ args = 8, pretend = 0, frame = 64
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #72
	str	r0, [fp, #-48]
	str	r1, [fp, #-52]
	str	r2, [fp, #-56]
	str	r3, [fp, #-60]
	ldr	r3, [fp, #4]
	str	r3, [fp, #-64]
	ldr	r3, .L89+172
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mov	r3, #0
	str	r3, [fp, #-24]
	mov	r3, #0
	str	r3, [fp, #-28]
	ldr	r0, [fp, #-48]
	bl	zmw_get_wlan_dev
	ldr	r3, [fp, #8]
	cmp	r3, #1
	bne	.L2
	ldr	r3, [fp, #-60]
	ldr	r2, [r3]
	ldr	r3, .L89+156
	ldr	r3, [r3]
	and	r3, r3, r2
	cmp	r3, #0
	bne	.L84
.L2:
	ldr	r3, .L89
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	bne	.L4
	ldr	r0, .L89+4
	bl	zm_debug_msg0
	b	.L5
.L4:
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	mov	r3, #0
	str	r3, [fp, #-40]
	sub	r3, fp, #40
	mov	r1, r3
	ldr	r0, [fp, #-48]
	bl	zfwGetShowZeroLengthSSID
	ldr	r3, [fp, #-40]
	cmp	r3, #0
	beq	.L6
	ldr	r3, .L89+8
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L7
	ldr	r0, .L89+12
	bl	zm_debug_msg0
	b	.L5
.L6:
	ldr	r3, [fp, #-36]
	cmp	r3, #0
	beq	.L9
	ldr	r3, .L89+8
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L7
.L9:
	ldr	r0, .L89+12
	bl	zm_debug_msg0
	b	.L5
.L7:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #4]
	ldr	r3, [fp, #-36]
	add	r3, r3, #2
	str	r3, [sp]
	ldr	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	ldr	r3, .L89+16
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L83
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	ldr	r3, [fp, #-36]
	cmp	r3, #1
	beq	.L12
	ldr	r3, .L89+20
	ldr	r3, [r3]
	ldr	r1, .L89+24
	mov	r0, r3
	bl	zm_msg0_mm
	b	.L5
.L12:
	ldr	r3, [fp, #-20]
	add	r3, r3, #2
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-16]
	mov	r2, #0
	ldr	r1, [fp, #-16]
	ldr	r0, [fp, #-48]
	bl	zfChNumToFreq
	mov	r3, r0
	mov	r1, r3
	ldr	r0, [fp, #-48]
	bl	zfHpIsAllowedChannel
	mov	r3, r0
	cmp	r3, #0
	beq	.L85
	mov	r2, #0
	ldr	r1, [fp, #-16]
	ldr	r0, [fp, #-48]
	bl	zfChNumToFreq
	mov	r2, r0
	ldr	r3, [fp, #-60]
	str	r2, [r3, #8]
	ldr	r3, [fp, #-60]
	ldr	r2, [fp, #-16]
	str	r2, [r3, #12]
	b	.L15
.L83:
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r2, [r3, #8]
	ldr	r3, [fp, #-60]
	str	r2, [r3, #8]
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r3, [r3, #8]
	sub	r2, fp, #40
	mov	r1, r2
	mov	r0, r3
	bl	zfChFreqToNum
	mov	r2, r0
	ldr	r3, [fp, #-60]
	str	r2, [r3, #12]
.L15:
	ldr	r3, .L89+28
	ldr	r2, [r3]
	ldr	r3, [fp, #-60]
	str	r2, [r3, #116]
	mov	r3, #0
	str	r3, [fp, #-32]
	b	.L16
.L17:
	ldr	r3, [fp, #-56]
	ldr	r2, [r3, #16]
	ldr	r3, [fp, #-32]
	lsl	r3, r3, #2
	add	r2, r2, r3
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #132]
	ldr	r3, [fp, #-32]
	lsl	r3, r3, #2
	add	r3, r1, r3
	ldr	r2, [r2]
	str	r2, [r3]
	ldr	r3, [fp, #-32]
	add	r3, r3, #1
	str	r3, [fp, #-32]
.L16:
	ldr	r3, [fp, #-32]
	cmp	r3, #5
	ble	.L17
	mov	r3, #0
	str	r3, [fp, #-32]
	b	.L18
.L19:
	ldr	r3, [fp, #-56]
	ldr	r2, [r3, #12]
	ldr	r3, [fp, #-32]
	lsl	r3, r3, #2
	add	r2, r2, r3
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #128]
	ldr	r3, [fp, #-32]
	lsl	r3, r3, #2
	add	r3, r1, r3
	ldr	r2, [r2]
	str	r2, [r3]
	ldr	r3, [fp, #-32]
	add	r3, r3, #1
	str	r3, [fp, #-32]
.L18:
	ldr	r3, [fp, #-32]
	cmp	r3, #5
	ble	.L19
	mov	r3, #0
	str	r3, [fp, #-32]
	b	.L20
.L21:
	ldr	r3, [fp, #-56]
	ldr	r2, [r3, #8]
	ldr	r3, [fp, #-32]
	lsl	r3, r3, #2
	add	r2, r2, r3
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #124]
	ldr	r3, [fp, #-32]
	lsl	r3, r3, #2
	add	r3, r1, r3
	ldr	r2, [r2]
	str	r2, [r3]
	ldr	r3, [fp, #-32]
	add	r3, r3, #1
	str	r3, [fp, #-32]
.L20:
	ldr	r3, [fp, #-32]
	cmp	r3, #7
	ble	.L21
	ldr	r3, [fp, #-56]
	ldr	r2, [r3, #4]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #120]
	ldr	r2, [r2]
	str	r2, [r3]
	ldr	r3, [fp, #-56]
	ldr	r2, [r3, #4]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #120]
	add	r3, r3, #4
	ldr	r2, [r2, #4]
	str	r2, [r3]
	ldr	r3, [fp, #-56]
	ldr	r2, [r3]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #16]
	ldr	r2, [r2]
	str	r2, [r3]
	ldr	r3, [fp, #-56]
	ldr	r2, [r3]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #16]
	add	r3, r3, #4
	ldr	r2, [r2, #4]
	str	r2, [r3]
	mov	r3, #36
	str	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfwBufGetSize
	mov	r2, r0
	ldr	r3, [fp, #-20]
	sub	r2, r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+32
	ldr	r3, [r3]
	cmp	r2, r3
	blt	.L22
	ldr	r3, .L89+32
	ldr	r3, [r3]
	sub	r2, r3, #1
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
.L22:
	mov	r3, #0
	str	r3, [fp, #-28]
.L24:
	ldr	r2, [fp, #-20]
	ldr	r3, [fp, #-28]
	add	r3, r2, r3
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	add	r3, r3, #2
	str	r3, [fp, #-24]
	ldr	r3, [fp, #-24]
	cmp	r3, #1
	ble	.L23
	ldr	r2, [fp, #-28]
	ldr	r3, [fp, #-24]
	add	r2, r2, r3
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #20]
	cmp	r2, r3
	bgt	.L23
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #24]
	ldr	r3, [fp, #-28]
	lsl	r3, r3, #2
	add	r1, r2, r3
	ldr	r2, [fp, #-20]
	ldr	r3, [fp, #-28]
	add	r2, r2, r3
	ldr	r3, [fp, #-24]
	str	r3, [sp]
	mov	r3, r2
	mov	r2, r1
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	ldr	r2, [fp, #-28]
	ldr	r3, [fp, #-24]
	add	r3, r2, r3
	str	r3, [fp, #-28]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #20]
	ldr	r2, [fp, #-28]
	cmp	r2, r3
	blt	.L24
	b	.L25
.L23:
	ldr	r3, .L89+36
	ldr	r3, [r3]
	ldr	r1, .L89+40
	mov	r0, r3
	bl	zm_msg0_mm
	nop
.L25:
	ldr	r3, [fp, #-60]
	ldr	r2, [fp, #-28]
	str	r2, [r3, #20]
	ldr	r3, .L89+44
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	bne	.L26
	ldr	r0, .L89+48
	bl	zm_debug_msg0
	b	.L5
.L26:
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	ldr	r3, [fp, #-36]
	cmp	r3, #0
	beq	.L27
	ldr	r3, .L89+52
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L28
.L27:
	ldr	r3, .L89+20
	ldr	r3, [r3]
	ldr	r1, .L89+56
	mov	r0, r3
	bl	zm_msg0_mm
	b	.L5
.L28:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #28]
	ldr	r3, [fp, #-36]
	add	r3, r3, #2
	str	r3, [sp]
	ldr	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	ldr	r3, .L89+60
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L29
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	ldr	r3, .L89+64
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L30
	ldr	r3, .L89+64
	ldr	r3, [r3]
	str	r3, [fp, #-36]
.L30:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #32]
	ldr	r3, [fp, #-36]
	add	r3, r3, #2
	str	r3, [sp]
	ldr	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r3, [r3, #12]
	cmp	r3, #0
	beq	.L29
	ldr	r3, [fp, #-60]
	add	r3, r3, #32
	mov	r2, #3
	mov	r1, r3
	ldr	r0, [fp, #-48]
	bl	zfHpGetRegulationTablefromISO
	ldr	r3, .L89+160
	ldr	r3, [r3]
	mov	r2, #0
	str	r2, [r3, #12]
.L29:
	ldr	r3, .L89+164
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L31
	ldr	r3, [fp, #-20]
	add	r3, r3, #2
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r2, r0
	ldr	r3, [fp, #-60]
	str	r2, [r3, #36]
.L31:
	ldr	r3, .L89+152
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L32
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	ldr	r3, .L89+52
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L33
	ldr	r3, .L89+20
	ldr	r3, [r3]
	ldr	r1, .L89+68
	mov	r0, r3
	bl	zm_msg0_mm
	b	.L5
.L33:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #40]
	ldr	r3, [fp, #-36]
	add	r3, r3, #2
	str	r3, [sp]
	ldr	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	b	.L34
.L32:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #40]
	mov	r2, #0
	str	r2, [r3]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #40]
	add	r3, r3, #4
	mov	r2, #0
	str	r2, [r3]
.L34:
	ldr	r3, .L89+72
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L35
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	ldr	r3, .L89+76
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L36
	ldr	r3, .L89+76
	ldr	r3, [r3]
	str	r3, [fp, #-36]
.L36:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #44]
	ldr	r3, [fp, #-36]
	add	r3, r3, #2
	str	r3, [sp]
	ldr	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	ldr	r3, .L89+80
	ldr	r2, [r3]
	ldr	r3, [fp, #-60]
	str	r2, [r3, #116]
	b	.L37
.L35:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #44]
	add	r3, r3, #4
	mov	r2, #0
	str	r2, [r3]
.L37:
	mov	r3, #255
	mov	r2, #4
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindWifiElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L38
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	ldr	r3, .L89+84
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L39
	ldr	r3, .L89+84
	ldr	r3, [r3]
	str	r3, [fp, #-36]
.L39:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #48]
	ldr	r3, [fp, #-36]
	add	r3, r3, #2
	str	r3, [sp]
	ldr	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	b	.L40
.L38:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #48]
	add	r3, r3, #4
	mov	r2, #0
	str	r2, [r3]
.L40:
	ldr	r3, .L89+88
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindSuperGElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L41
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #108]
	ldr	r3, .L89+92
	ldr	r3, [r3]
	orr	r2, r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #108]
.L41:
	ldr	r3, .L89+88
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindXRElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L42
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #108]
	ldr	r3, .L89+96
	ldr	r3, [r3]
	orr	r2, r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #108]
.L42:
	ldr	r3, .L89+100
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L43
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	str	r0, [fp, #-36]
	ldr	r3, .L89+76
	ldr	r3, [r3]
	ldr	r2, [fp, #-36]
	cmp	r2, r3
	ble	.L44
	ldr	r3, .L89+76
	ldr	r3, [r3]
	str	r3, [fp, #-36]
.L44:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #52]
	ldr	r3, [fp, #-36]
	add	r3, r3, #2
	str	r3, [sp]
	ldr	r3, [fp, #-20]
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfCopyFromRxBuffer
	ldr	r3, .L89+80
	ldr	r2, [r3]
	ldr	r3, [fp, #-60]
	str	r2, [r3, #116]
	b	.L45
.L43:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #52]
	add	r3, r3, #4
	mov	r2, #0
	str	r2, [r3]
.L45:
	mov	r3, #1
	mov	r2, #2
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindWifiElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L46
	ldr	r3, [fp, #-20]
	add	r3, r3, #8
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r3, r3, #128
	str	r3, [fp, #-12]
	ldr	r3, [fp, #-12]
	orr	r2, r3, #1
	ldr	r3, [fp, #-60]
	str	r2, [r3, #60]
	b	.L47
.L46:
	mov	r3, #0
	mov	r2, #2
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindWifiElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L48
	ldr	r3, [fp, #-20]
	add	r3, r3, #8
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r3, r3, #128
	str	r3, [fp, #-12]
	ldr	r3, [fp, #-12]
	orr	r2, r3, #1
	ldr	r3, [fp, #-60]
	str	r2, [r3, #60]
	b	.L47
.L48:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #60]
.L47:
	ldr	r3, .L89+128
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L49
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #64]
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r3, r3, #2
	cmp	r3, #0
	beq	.L50
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #68]
	b	.L51
.L50:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #68]
.L51:
	ldr	r3, [fp, #-20]
	add	r3, r3, #1
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r3, r3, #64
	cmp	r3, #0
	beq	.L52
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #72]
	b	.L53
.L52:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #72]
	b	.L53
.L49:
	ldr	r3, .L89+132
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L54
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #64]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #108]
	ldr	r3, .L89+124
	ldr	r3, [r3]
	orr	r2, r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #108]
	ldr	r3, [fp, #-20]
	add	r3, r3, #2
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r3, r3, #2
	cmp	r3, #0
	beq	.L55
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #68]
	b	.L56
.L55:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #68]
.L56:
	ldr	r3, [fp, #-20]
	add	r3, r3, #2
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r3, r3, #64
	cmp	r3, #0
	beq	.L57
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #72]
	b	.L53
.L57:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #72]
	b	.L53
.L54:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #64]
.L53:
	ldr	r3, .L89+136
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L58
	ldr	r3, [fp, #-20]
	add	r3, r3, #2
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r2, r3, #3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #76]
	b	.L59
.L58:
	ldr	r3, .L89+140
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L60
	ldr	r3, [fp, #-20]
	add	r3, r3, #3
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r3, r0
	and	r2, r3, #3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #76]
	b	.L59
.L60:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #76]
.L59:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #68]
	cmp	r3, #1
	bne	.L61
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #76]
	cmp	r3, #1
	beq	.L61
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #76]
	cmp	r3, #3
	beq	.L61
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #68]
.L61:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #68]
	cmp	r3, #1
	bne	.L62
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #8]
	ldr	r2, [fp, #-60]
	ldr	r2, [r2, #76]
	cmp	r2, #1
	bne	.L63
	mov	r2, #20
	b	.L64
.L63:
	mvn	r2, #19
.L64:
	add	r3, r2, r3
	mov	r1, r3
	ldr	r0, [fp, #-48]
	bl	zfHpIsAllowedChannel
	mov	r3, r0
	cmp	r3, #0
	bne	.L62
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #64]
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #68]
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #76]
.L62:
	ldr	r3, .L89+136
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L65
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindBrdcmMrvlRlnkExtCap
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	bne	.L65
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #80]
	b	.L66
.L65:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #80]
.L66:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #64]
	cmp	r3, #1
	bne	.L67
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindBroadcomExtCap
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L67
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #84]
	b	.L68
.L67:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #84]
.L68:
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindMarvelExtCap
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L69
	ldr	r3, [fp, #-60]
	mov	r2, #1
	str	r2, [r3, #88]
	b	.L70
.L90:
	.align	2
.L89:
	.word	ZM_WLAN_EID_SSID
	.word	.LC0
	.word	ZM_MAX_SSID_LENGTH
	.word	.LC1
	.word	ZM_WLAN_EID_DS
	.word	ZM_LV_0
	.word	.LC2
	.word	ZM_SECURITY_TYPE_NONE
	.word	ZM_MAX_PROBE_FRAME_BODY_SIZE
	.word	ZM_LV_1
	.word	.LC3
	.word	ZM_WLAN_EID_SUPPORT_RATE
	.word	.LC4
	.word	ZM_MAX_SUPP_RATES_IE_SIZE
	.word	.LC5
	.word	ZM_WLAN_EID_COUNTRY
	.word	ZM_MAX_COUNTRY_INFO_SIZE
	.word	.LC6
	.word	ZM_WLAN_EID_WPA_IE
	.word	ZM_MAX_IE_SIZE
	.word	ZM_SECURITY_TYPE_WPA
	.word	ZM_MAX_WPS_IE_SIZE
	.word	ZM_WLAN_EID_VENDOR_PRIVATE
	.word	ZM_SuperG_AP
	.word	ZM_XR_AP
	.word	ZM_WLAN_EID_RSN_IE
	.word	ZM_WLAN_EID_IBSS
	.word	3000
	.word	ZM_WIRELESS_MODE_5_N
	.word	ZM_WIRELESS_MODE_5_54
	.word	ZM_WIRELESS_MODE_24_N
	.word	ZM_All11N_AP
	.word	ZM_WLAN_EID_HT_CAPABILITY
	.word	ZM_WLAN_PREN2_EID_HTCAPABILITY
	.word	ZM_WLAN_EID_EXTENDED_HT_CAPABILITY
	.word	ZM_WLAN_PREN2_EID_HTINFORMATION
	.word	ZM_WIRELESS_MODE_24_54
	.word	ZM_WIRELESS_MODE_24_11
	.word	ZM_WLAN_EID_EXTENDED_RATE
	.word	ZM_BSS_INFO_VALID_BIT
	.word	wd
	.word	ZM_WLAN_EID_ERP
	.word	65535
	.word	.LC7
.L69:
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #88]
.L70:
	ldr	r3, .L89+104
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L71
	ldr	r3, [fp, #-20]
	add	r3, r3, #2
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readh
	mov	r2, r0
	ldr	r3, [fp, #-60]
	str	r2, [r3, #112]
.L71:
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #8]
	ldr	r2, .L89+108
	cmp	r3, r2
	ble	.L72
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r2, [r3]
	ldr	r3, .L89+112
	ldr	r3, [r3]
	and	r3, r3, r2
	cmp	r3, #0
	bne	.L73
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r2, [r3]
	ldr	r3, .L89+116
	ldr	r3, [r3]
	and	r3, r3, r2
	cmp	r3, #0
	beq	.L86
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #64]
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #68]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #108]
	ldr	r3, .L89+124
	ldr	r3, [r3]
	mvn	r3, r3
	and	r2, r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #108]
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #76]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+128
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+132
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+136
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+140
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	b	.L73
.L72:
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r2, [r3]
	ldr	r3, .L89+120
	ldr	r3, [r3]
	and	r3, r3, r2
	cmp	r3, #0
	bne	.L73
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #64]
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #68]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #108]
	ldr	r3, .L89+124
	ldr	r3, [r3]
	mvn	r3, r3
	and	r2, r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #108]
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #76]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+128
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+132
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+136
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+140
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r2, [r3]
	ldr	r3, .L89+144
	ldr	r3, [r3]
	and	r3, r3, r2
	cmp	r3, #0
	bne	.L73
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r2, [r3]
	ldr	r3, .L89+148
	ldr	r3, [r3]
	and	r3, r3, r2
	cmp	r3, #0
	beq	.L87
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #8]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #28]
	mov	r2, r3
	ldr	r0, [fp, #-48]
	bl	zfIsGOnlyMode
	mov	r3, r0
	cmp	r3, #0
	bne	.L88
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #8]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #40]
	mov	r2, r3
	ldr	r0, [fp, #-48]
	bl	zfIsGOnlyMode
	mov	r3, r0
	cmp	r3, #0
	bne	.L88
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #28]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #40]
	mov	r2, r3
	ldr	r0, [fp, #-48]
	bl	zfGatherBMode
	ldr	r3, [fp, #-60]
	mov	r2, #0
	str	r2, [r3, #36]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+164
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, .L89+152
	ldr	r3, [r3]
	ldr	r0, [fp, #-48]
	bl	zfRemoveElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r1, [r3, #24]
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #20]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #28]
	ldr	r0, [fp, #-48]
	bl	zfUpdateElement
	mov	r3, r0
	mov	r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3, #20]
.L73:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3]
	ldr	r3, .L89+156
	ldr	r3, [r3]
	orr	r2, r2, r3
	ldr	r3, [fp, #-60]
	str	r2, [r3]
	b	.L3
.L84:
	nop
.L3:
	ldr	r3, .L89+160
	ldr	r3, [r3]
	ldr	r2, [r3, #4]
	ldr	r3, [fp, #-60]
	str	r2, [r3, #104]
	ldr	r3, .L89+164
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zfFindElement
	str	r0, [fp, #-20]
	ldr	r3, [fp, #-20]
	ldr	r2, .L89+168
	cmp	r3, r2
	beq	.L78
	ldr	r3, [fp, #-20]
	add	r3, r3, #2
	mov	r2, r3
	ldr	r1, [fp, #-52]
	ldr	r0, [fp, #-48]
	bl	zmw_rx_buf_readb
	mov	r2, r0
	ldr	r3, [fp, #-60]
	str	r2, [r3, #36]
.L78:
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #92]
	ldr	r3, [fp, #-64]
	ldr	r3, [r3]
	cmp	r2, r3
	bge	.L79
	ldr	r3, [fp, #-64]
	ldr	r2, [r3]
	ldr	r3, [fp, #-60]
	str	r2, [r3, #92]
	ldr	r3, [fp, #-64]
	ldr	r3, [r3]
	lsl	r2, r3, #1
	ldr	r3, [fp, #-60]
	str	r2, [r3, #96]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #28]
	add	r3, r3, #24
	ldr	r2, [r3]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #40]
	ldr	r3, [r3]
	add	r1, r2, r3
	ldr	r3, [fp, #-60]
	ldr	r2, [r3, #64]
	ldr	r3, [fp, #-60]
	ldr	r0, [r3, #68]
	ldr	r3, [fp, #-60]
	ldr	r3, [r3, #92]
	str	r3, [sp]
	mov	r3, r0
	ldr	r0, [fp, #-48]
	bl	zfComputeBssInfoWeightValue
	mov	r2, r0
	ldr	r3, [fp, #-60]
	str	r2, [r3, #100]
.L79:
	mov	r3, #0
	b	.L81
.L5:
	mov	r3, #1
	b	.L81
.L85:
	nop
	b	.L14
.L86:
	nop
	b	.L14
.L87:
	nop
	b	.L14
.L88:
	nop
.L14:
	mov	r3, #2
.L81:
	ldr	r2, .L89+172
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L82
	bl	__stack_chk_fail
.L82:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	zfStaInitBssInfo, .-zfStaInitBssInfo
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
