OSDN Git Service

Add rtl8812au driver version 5.2.6.2
[android-x86/external-kernel-drivers.git] / rtl8812au / hal / rtl8812a / rtl8812a_cmd.c
diff --git a/rtl8812au/hal/rtl8812a/rtl8812a_cmd.c b/rtl8812au/hal/rtl8812a/rtl8812a_cmd.c
new file mode 100644 (file)
index 0000000..16df638
--- /dev/null
@@ -0,0 +1,1685 @@
+/******************************************************************************
+ *
+ * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
+ * more details.
+ *
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc.,
+ * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
+ *
+ *
+ ******************************************************************************/
+#define _RTL8812A_CMD_C_
+
+/* #include <drv_types.h> */
+#include <rtl8812a_hal.h>
+#include "hal_com_h2c.h"
+#include <hal_com.h>
+#define CONFIG_H2C_EF
+
+#define RTL8812_MAX_H2C_BOX_NUMS       4
+#define RTL8812_MAX_CMD_LEN    7
+#define RTL8812_MESSAGE_BOX_SIZE               4
+#define RTL8812_EX_MESSAGE_BOX_SIZE    4
+
+
+static u8 _is_fw_read_cmd_down(_adapter *padapter, u8 msgbox_num)
+{
+       u8      read_down = _FALSE;
+       int     retry_cnts = 100;
+
+       u8 valid;
+
+       /* RTW_INFO(" _is_fw_read_cmd_down ,reg_1cc(%x),msg_box(%d)...\n",rtw_read8(padapter,REG_HMETFR),msgbox_num); */
+
+       do {
+               valid = rtw_read8(padapter, REG_HMETFR) & BIT(msgbox_num);
+               if (0 == valid)
+                       read_down = _TRUE;
+               else
+                       rtw_msleep_os(1);
+       } while ((!read_down) && (retry_cnts--));
+
+       return read_down;
+
+}
+
+
+/*****************************************
+* H2C Msg format :
+* 0x1DF - 0x1D0
+*| 31 - 8      | 7-5    4 - 0  |
+*| h2c_msg     |Class_ID CMD_ID        |
+*
+* Extend 0x1FF - 0x1F0
+*|31 - 0         |
+*|ext_msg|
+******************************************/
+s32 fill_h2c_cmd_8812(PADAPTER padapter, u8 ElementID, u32 CmdLen, u8 *pCmdBuffer)
+{
+       u8 h2c_box_num;
+       u32     msgbox_addr;
+       u32 msgbox_ex_addr;
+       HAL_DATA_TYPE *pHalData = GET_HAL_DATA(padapter);
+       u8 cmd_idx, ext_cmd_len;
+       u32     h2c_cmd = 0;
+       u32     h2c_cmd_ex = 0;
+       s32 ret = _FAIL;
+
+
+       padapter = GET_PRIMARY_ADAPTER(padapter);
+       pHalData = GET_HAL_DATA(padapter);
+
+
+       if (padapter->bFWReady == _FALSE) {
+               /* RTW_INFO("fill_h2c_cmd_8812(): return H2C cmd because fw is not ready\n"); */
+               return ret;
+       }
+
+       _enter_critical_mutex(&(adapter_to_dvobj(padapter)->h2c_fwcmd_mutex), NULL);
+
+
+       if (!pCmdBuffer)
+               goto exit;
+       if (CmdLen > RTL8812_MAX_CMD_LEN)
+               goto exit;
+       if (rtw_is_surprise_removed(padapter))
+               goto exit;
+
+       /* pay attention to if  race condition happened in  H2C cmd setting. */
+       do {
+               h2c_box_num = pHalData->LastHMEBoxNum;
+
+               if (!_is_fw_read_cmd_down(padapter, h2c_box_num)) {
+                       RTW_INFO(" fw read cmd failed...\n");
+                       goto exit;
+               }
+
+               *(u8 *)(&h2c_cmd) = ElementID;
+
+               if (CmdLen <= 3)
+                       _rtw_memcpy((u8 *)(&h2c_cmd) + 1, pCmdBuffer, CmdLen);
+               else {
+                       _rtw_memcpy((u8 *)(&h2c_cmd) + 1, pCmdBuffer, 3);
+                       ext_cmd_len = CmdLen - 3;
+                       _rtw_memcpy((u8 *)(&h2c_cmd_ex), pCmdBuffer + 3, ext_cmd_len);
+
+                       /* Write Ext command */
+                       msgbox_ex_addr = REG_HMEBOX_EXT0_8812 + (h2c_box_num * RTL8812_EX_MESSAGE_BOX_SIZE);
+#ifdef CONFIG_H2C_EF
+                       for (cmd_idx = 0; cmd_idx < ext_cmd_len; cmd_idx++)
+                               rtw_write8(padapter, msgbox_ex_addr + cmd_idx, *((u8 *)(&h2c_cmd_ex) + cmd_idx));
+#else
+                       h2c_cmd_ex = le32_to_cpu(h2c_cmd_ex);
+                       rtw_write32(padapter, msgbox_ex_addr, h2c_cmd_ex);
+#endif
+               }
+               /* Write command */
+               msgbox_addr = REG_HMEBOX_0 + (h2c_box_num * RTL8812_MESSAGE_BOX_SIZE);
+#ifdef CONFIG_H2C_EF
+               for (cmd_idx = 0; cmd_idx < RTL8812_MESSAGE_BOX_SIZE; cmd_idx++)
+                       rtw_write8(padapter, msgbox_addr + cmd_idx, *((u8 *)(&h2c_cmd) + cmd_idx));
+#else
+               h2c_cmd = le32_to_cpu(h2c_cmd);
+               rtw_write32(padapter, msgbox_addr, h2c_cmd);
+#endif
+
+               /* RTW_INFO("MSG_BOX:%d,CmdLen(%d), reg:0x%x =>h2c_cmd:0x%x, reg:0x%x =>h2c_cmd_ex:0x%x ..\n" */
+               /*      ,pHalData->LastHMEBoxNum ,CmdLen,msgbox_addr,h2c_cmd,msgbox_ex_addr,h2c_cmd_ex); */
+
+               pHalData->LastHMEBoxNum = (h2c_box_num + 1) % RTL8812_MAX_H2C_BOX_NUMS;
+
+       } while (0);
+
+       ret = _SUCCESS;
+
+exit:
+
+       _exit_critical_mutex(&(adapter_to_dvobj(padapter)->h2c_fwcmd_mutex), NULL);
+
+
+       return ret;
+}
+
+u8 rtl8812_set_rssi_cmd(_adapter *padapter, u8 *param)
+{
+       u8      res = _SUCCESS;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+
+       *((u32 *) param) = cpu_to_le32(*((u32 *) param));
+
+       fill_h2c_cmd_8812(padapter, H2C_8812_RSSI_REPORT, 4, param);
+
+
+       return res;
+}
+
+u8     Get_VHT_ENI(
+       u32             IOTAction,
+       u32             WirelessMode,
+       u32             ratr_bitmap
+)
+{
+       u8      Ret = 0;
+
+       if (WirelessMode == WIRELESS_11_24AC) {
+               if (ratr_bitmap & 0xfff00000)   /* Mix , 2SS */
+                       Ret = 3;
+               else                                    /* Mix, 1SS */
+                       Ret = 2;
+       } else if (WirelessMode == WIRELESS_11_5AC) {
+               Ret = 1;                                        /* VHT */
+       }
+
+       return Ret << 4;
+}
+
+BOOLEAN
+Get_RA_ShortGI_8812(
+       PADAPTER                        Adapter,
+       struct sta_info         *psta,
+       u8                                      shortGIrate,
+       u32                                     ratr_bitmap
+)
+{
+       BOOLEAN         bShortGI;
+       struct mlme_ext_priv    *pmlmeext = &Adapter->mlmeextpriv;
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       bShortGI = shortGIrate;
+
+#ifdef CONFIG_80211AC_VHT
+       if (bShortGI &&
+           is_supported_vht(psta->wireless_mode) &&
+           (pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_REALTEK_JAGUAR_CCUTAP) &&
+           TEST_FLAG(psta->vhtpriv.ldpc_cap, LDPC_VHT_ENABLE_TX)
+          ) {
+               if (ratr_bitmap & 0xC0000000)
+                       bShortGI = _FALSE;
+       }
+#endif
+
+       return bShortGI;
+}
+
+
+void
+set_ra_ldpc_8812(
+       struct sta_info *psta,
+       BOOLEAN                 bLDPC
+)
+{
+       if (psta == NULL)
+               return;
+#ifdef CONFIG_80211AC_VHT
+       if (psta->wireless_mode == WIRELESS_11_5AC) {
+               if (bLDPC && TEST_FLAG(psta->vhtpriv.ldpc_cap, LDPC_VHT_CAP_TX))
+                       SET_FLAG(psta->vhtpriv.ldpc_cap, LDPC_VHT_ENABLE_TX);
+               else
+                       CLEAR_FLAG(psta->vhtpriv.ldpc_cap, LDPC_VHT_ENABLE_TX);
+       } else if (is_supported_ht(psta->wireless_mode) || is_supported_vht(psta->wireless_mode)) {
+               if (bLDPC && TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_CAP_TX))
+                       SET_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX);
+               else
+                       CLEAR_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX);
+       }
+
+       update_ldpc_stbc_cap(psta);
+#endif
+
+       /* RTW_INFO("MacId %d bLDPC %d\n", psta->mac_id, bLDPC); */
+}
+
+
+u8
+Get_RA_LDPC_8812(
+       struct sta_info         *psta
+)
+{
+       u8      bLDPC = 0;
+
+       if (psta != NULL) {
+               if (IS_MCAST(psta->hwaddr))
+                       bLDPC = 0;
+               else {
+#ifdef CONFIG_80211AC_VHT
+                       if (is_supported_vht(psta->wireless_mode)) {
+                               if (TEST_FLAG(psta->vhtpriv.ldpc_cap, LDPC_VHT_CAP_TX))
+                                       bLDPC = 1;
+                               else
+                                       bLDPC = 0;
+                       } else if (is_supported_ht(psta->wireless_mode)) {
+                               if (TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_CAP_TX))
+                                       bLDPC = 1;
+                               else
+                                       bLDPC = 0;
+                       } else
+#endif
+                               bLDPC = 0;
+               }
+       }
+
+       return bLDPC << 2;
+}
+
+void rtl8812_set_raid_cmd(PADAPTER padapter, u32 bitmap, u8 *arg, u8 bw)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct macid_ctl_t *macid_ctl = &padapter->dvobj->macid_ctl;
+       struct sta_info *psta = NULL;
+       u8 macid, init_rate, raid, shortGIrate = _FALSE;
+       u8 ignore_bw = _FALSE;
+
+       macid = arg[0];
+       raid = arg[1];
+       shortGIrate = arg[2] & 0x0F;
+       ignore_bw = arg[2] >> 4;
+       init_rate = arg[3];
+
+       if (macid < macid_ctl->num)
+               psta = macid_ctl->sta[macid];
+       if (psta == NULL) {
+               RTW_PRINT(FUNC_ADPT_FMT" macid:%u, sta is NULL\n"
+                         , FUNC_ADPT_ARG(padapter), macid);
+               return;
+       }
+
+       if (pHalData->fw_ractrl == _TRUE) {
+               u8      H2CCommand[7] = {0};
+
+               shortGIrate = Get_RA_ShortGI_8812(padapter, psta, shortGIrate, bitmap);
+
+               H2CCommand[0] = macid;
+               H2CCommand[1] = (raid & 0x1F) | (shortGIrate ? 0x80 : 0x00) ;
+               H2CCommand[2] = (bw & 0x3) | Get_RA_LDPC_8812(psta) | Get_VHT_ENI(0, psta->wireless_mode, bitmap);
+               if (ignore_bw)
+                       H2CCommand[2] |= BIT(3);
+               /* DisableTXPowerTraining */
+               if (pHalData->bDisableTXPowerTraining) {
+                       H2CCommand[2] |= BIT6;
+                       RTW_INFO("%s,Disable PWT by driver\n", __FUNCTION__);
+               } else {
+                       struct PHY_DM_STRUCT    *pDM_OutSrc = &pHalData->odmpriv;
+
+                       if (pDM_OutSrc->is_disable_power_training) {
+                               H2CCommand[2] |= BIT6;
+                               RTW_INFO("%s,Disable PWT by DM\n", __FUNCTION__);
+                       }
+               }
+
+               H2CCommand[3] = (u8)(bitmap & 0x000000ff);
+               H2CCommand[4] = (u8)((bitmap & 0x0000ff00) >> 8);
+               H2CCommand[5] = (u8)((bitmap & 0x00ff0000) >> 16);
+               H2CCommand[6] = (u8)((bitmap & 0xff000000) >> 24);
+
+               /* RTW_INFO("rtl8812_set_raid_cmd, bitmap=0x%x, mac_id=0x%x, raid=0x%x, shortGIrate=%x\n", bitmap, macid, raid, shortGIrate); */
+
+               fill_h2c_cmd_8812(padapter, H2C_8812_RA_MASK, 7, H2CCommand);
+       }
+
+       if (shortGIrate == _TRUE)
+               init_rate |= BIT(7);
+
+       pHalData->INIDATA_RATE[macid] = init_rate;
+
+
+}
+
+#ifdef CONFIG_FWLPS_IN_IPS
+void rtl8812_set_FwPwrModeInIPS_cmd(PADAPTER padapter, u8 cmd_param)
+{
+       fill_h2c_cmd_8812(padapter, H2C_8812_INACTIVE_PS, 1, &cmd_param);
+}
+#endif
+
+void rtl8812_set_FwPwrMode_cmd(PADAPTER padapter, u8 PSMode)
+{
+       u8      u1H2CSetPwrMode[H2C_PWRMODE_LEN] = {0};
+       struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
+       u8      Mode = 0, RLBM = 0, PowerState = 0, LPSAwakeIntvl = 2, pwrModeByte5 = 0;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+
+
+       RTW_INFO("%s: Mode=%d SmartPS=%d UAPSD=%d\n", __FUNCTION__,
+               PSMode, pwrpriv->smart_ps, padapter->registrypriv.uapsd_enable);
+
+       switch (PSMode) {
+       case PS_MODE_ACTIVE:
+               Mode = 0;
+               break;
+       case PS_MODE_MIN:
+               Mode = 1;
+               break;
+       case PS_MODE_MAX:
+               RLBM = 1;
+               Mode = 1;
+               break;
+       case PS_MODE_DTIM:
+               RLBM = 2;
+               Mode = 1;
+               break;
+       case PS_MODE_UAPSD_WMM:
+               Mode = 2;
+               break;
+       default:
+               Mode = 0;
+               break;
+       }
+
+       if (Mode > PS_MODE_ACTIVE) {
+#ifdef CONFIG_BT_COEXIST
+               if ((rtw_btcoex_IsBtControlLps(padapter) == _TRUE)  && (_TRUE == pHalData->EEPROMBluetoothCoexist)) {
+                       PowerState = rtw_btcoex_RpwmVal(padapter);
+                       pwrModeByte5 = rtw_btcoex_LpsVal(padapter);
+               } else
+#endif /* CONFIG_BT_COEXIST */
+               {
+                       PowerState = 0x00;/* AllON(0x0C), RFON(0x04), RFOFF(0x00) */
+                       pwrModeByte5 = 0x40;
+               }
+
+#ifdef CONFIG_EXT_CLK
+               Mode |= BIT(7);/* supporting 26M XTAL CLK_Request feature. */
+#endif /* CONFIG_EXT_CLK */
+       } else {
+               PowerState = 0x0C;/* AllON(0x0C), RFON(0x04), RFOFF(0x00) */
+               pwrModeByte5 = 0x40;
+       }
+
+       /* 0: Active, 1: LPS, 2: WMMPS */
+       SET_8812_H2CCMD_PWRMODE_PARM_MODE(u1H2CSetPwrMode, Mode);
+
+       /* 0:Min, 1:Max , 2:User define */
+       SET_8812_H2CCMD_PWRMODE_PARM_RLBM(u1H2CSetPwrMode, RLBM);
+
+       /* (LPS) smart_ps:  0: PS_Poll, 1: PS_Poll , 2: NullData */
+       /* (WMM)smart_ps: 0:PS_Poll, 1:NullData */
+       SET_8812_H2CCMD_PWRMODE_PARM_SMART_PS(u1H2CSetPwrMode, pwrpriv->smart_ps);
+
+       /* AwakeInterval: Unit is beacon interval, this field is only valid in PS_DTIM mode */
+       SET_8812_H2CCMD_PWRMODE_PARM_BCN_PASS_TIME(u1H2CSetPwrMode, LPSAwakeIntvl);
+
+       /* (WMM only)bAllQueueUAPSD */
+       SET_8812_H2CCMD_PWRMODE_PARM_ALL_QUEUE_UAPSD(u1H2CSetPwrMode, padapter->registrypriv.uapsd_enable);
+
+       /* AllON(0x0C), RFON(0x04), RFOFF(0x00) */
+       SET_8812_H2CCMD_PWRMODE_PARM_PWR_STATE(u1H2CSetPwrMode, PowerState);
+
+       SET_8812_H2CCMD_PWRMODE_PARM_BYTE5(u1H2CSetPwrMode, pwrModeByte5);
+
+#ifdef CONFIG_BT_COEXIST
+       if (_TRUE == pHalData->EEPROMBluetoothCoexist)
+               rtw_btcoex_RecordPwrMode(padapter, u1H2CSetPwrMode, sizeof(u1H2CSetPwrMode));
+#endif /* CONFIG_BT_COEXIST */
+       /* RTW_INFO("u1H2CSetPwrMode="MAC_FMT"\n", MAC_ARG(u1H2CSetPwrMode)); */
+       fill_h2c_cmd_8812(padapter, H2C_8812_SETPWRMODE, sizeof(u1H2CSetPwrMode), u1H2CSetPwrMode);
+
+}
+
+#ifdef CONFIG_TDLS
+#ifdef CONFIG_TDLS_CH_SW
+void rtl8812_set_BcnEarly_C2H_Rpt_cmd(PADAPTER padapter, u8 enable)
+{
+       u8      u1H2CSetPwrMode[H2C_PWRMODE_LEN] = {0};
+
+       SET_8812_H2CCMD_PWRMODE_PARM_MODE(u1H2CSetPwrMode, 1);
+       SET_8812_H2CCMD_PWRMODE_PARM_RLBM(u1H2CSetPwrMode, 1);
+       SET_8812_H2CCMD_PWRMODE_PARM_SMART_PS(u1H2CSetPwrMode, 0);
+       SET_8812_H2CCMD_PWRMODE_PARM_BCN_PASS_TIME(u1H2CSetPwrMode, 0);
+       SET_8812_H2CCMD_PWRMODE_PARM_ALL_QUEUE_UAPSD(u1H2CSetPwrMode, 0);
+       SET_8812_H2CCMD_PWRMODE_PARM_BCN_EARLY_C2H_RPT(u1H2CSetPwrMode, enable);
+       SET_8812_H2CCMD_PWRMODE_PARM_PWR_STATE(u1H2CSetPwrMode, 0x0C);
+       SET_8812_H2CCMD_PWRMODE_PARM_BYTE5(u1H2CSetPwrMode, 0);
+       fill_h2c_cmd_8812(padapter, H2C_8812_SETPWRMODE, sizeof(u1H2CSetPwrMode), u1H2CSetPwrMode);
+}
+#endif
+#endif
+
+void ConstructBeacon(_adapter *padapter, u8 *pframe, u32 *pLength)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       __le16  *fctrl;
+       u32                                     rate_len, pktlen;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       WLAN_BSSID_EX           *cur_network = &(pmlmeinfo->network);
+       u8      bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+
+
+       /* RTW_INFO("%s\n", __FUNCTION__); */
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+
+       _rtw_memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, adapter_mac_addr(padapter), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(cur_network), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
+       /* pmlmeext->mgnt_seq++; */
+       set_frame_sub_type(pframe, WIFI_BEACON);
+
+       pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
+       pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+
+       /* timestamp will be inserted by hardware */
+       pframe += 8;
+       pktlen += 8;
+
+       /* beacon interval: 2 bytes */
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       pktlen += 2;
+
+       /* capability info: 2 bytes */
+       _rtw_memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
+
+       pframe += 2;
+       pktlen += 2;
+
+       if ((pmlmeinfo->state & 0x03) == WIFI_FW_AP_STATE) {
+               /* RTW_INFO("ie len=%d\n", cur_network->IELength); */
+               pktlen += cur_network->IELength - sizeof(NDIS_802_11_FIXED_IEs);
+               _rtw_memcpy(pframe, cur_network->IEs + sizeof(NDIS_802_11_FIXED_IEs), pktlen);
+
+               goto _ConstructBeacon;
+       }
+
+       /* below for ad-hoc mode */
+
+       /* SSID */
+       pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pktlen);
+
+       /* supported rates... */
+       rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
+       pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8) ? 8 : rate_len), cur_network->SupportedRates, &pktlen);
+
+       /* DS parameter set */
+       pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pktlen);
+
+       if ((pmlmeinfo->state & 0x03) == WIFI_FW_ADHOC_STATE) {
+               u32 ATIMWindow;
+               /* IBSS Parameter Set... */
+               /* ATIMWindow = cur->Configuration.ATIMWindow; */
+               ATIMWindow = 0;
+               pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pktlen);
+       }
+
+
+       /* todo: ERP IE */
+
+
+       /* EXTERNDED SUPPORTED RATE */
+       if (rate_len > 8)
+               pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pktlen);
+
+
+       /* todo:HT for adhoc */
+
+_ConstructBeacon:
+
+       if ((pktlen + TXDESC_SIZE) > 512) {
+               RTW_INFO("beacon frame too large\n");
+               return;
+       }
+
+       *pLength = pktlen;
+
+       /* RTW_INFO("%s bcn_sz=%d\n", __FUNCTION__, pktlen); */
+
+}
+
+void ConstructPSPoll(_adapter *padapter, u8 *pframe, u32 *pLength)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       __le16 *fctrl;
+       u32                                     pktlen;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+       /* RTW_INFO("%s\n", __FUNCTION__); */
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       /* Frame control. */
+       fctrl = &(pwlanhdr->frame_ctl);
+       *(fctrl) = 0;
+       SetPwrMgt(fctrl);
+       set_frame_sub_type(pframe, WIFI_PSPOLL);
+
+       /* AID. */
+       set_duration(pframe, (pmlmeinfo->aid | 0xc000));
+
+       /* BSSID. */
+       _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       /* TA. */
+       _rtw_memcpy(pwlanhdr->addr2, adapter_mac_addr(padapter), ETH_ALEN);
+
+       *pLength = 16;
+}
+
+void ConstructNullFunctionData(
+       PADAPTER padapter,
+       u8              *pframe,
+       u32             *pLength,
+       u8              *StaAddr,
+       u8              bQoS,
+       u8              AC,
+       u8              bEosp,
+       u8              bForcePowerSave)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       __le16 *fctrl;
+       u32                                             pktlen;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_network             *cur_network = &pmlmepriv->cur_network;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+
+
+       /* RTW_INFO("%s:%d\n", __FUNCTION__, bForcePowerSave); */
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &pwlanhdr->frame_ctl;
+       *(fctrl) = 0;
+       if (bForcePowerSave)
+               SetPwrMgt(fctrl);
+
+       switch (cur_network->network.InfrastructureMode) {
+       case Ndis802_11Infrastructure:
+               SetToDs(fctrl);
+               _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr2, adapter_mac_addr(padapter), ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, StaAddr, ETH_ALEN);
+               break;
+       case Ndis802_11APMode:
+               SetFrDs(fctrl);
+               _rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr2, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, adapter_mac_addr(padapter), ETH_ALEN);
+               break;
+       case Ndis802_11IBSS:
+       default:
+               _rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr2, adapter_mac_addr(padapter), ETH_ALEN);
+               _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+               break;
+       }
+
+       SetSeqNum(pwlanhdr, 0);
+
+       if (bQoS == _TRUE) {
+               struct rtw_ieee80211_hdr_3addr_qos *pwlanqoshdr;
+
+               set_frame_sub_type(pframe, WIFI_QOS_DATA_NULL);
+
+               pwlanqoshdr = (struct rtw_ieee80211_hdr_3addr_qos *)pframe;
+               SetPriority(&pwlanqoshdr->qc, AC);
+               SetEOSP(&pwlanqoshdr->qc, bEosp);
+
+               pktlen = sizeof(struct rtw_ieee80211_hdr_3addr_qos);
+       } else {
+               set_frame_sub_type(pframe, WIFI_DATA_NULL);
+
+               pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+       }
+
+       *pLength = pktlen;
+}
+
+#ifdef CONFIG_GTK_OL
+static void ConstructGTKResponse(
+       PADAPTER padapter,
+       u8                      *pframe,
+       u32                     *pLength
+)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       __le16 *fctrl;
+       u32                                             pktlen;
+       struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
+       struct wlan_network             *cur_network = &pmlmepriv->cur_network;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct security_priv *psecuritypriv = &padapter->securitypriv;
+       static u8                       LLCHeader[8] = {0xAA, 0xAA, 0x03, 0x00, 0x00, 0x00, 0x88, 0x8E};
+       static u8                       GTKbody_a[11] = {0x01, 0x03, 0x00, 0x5F, 0x02, 0x03, 0x12, 0x00, 0x10, 0x42, 0x0B};
+       u8                              *pGTKRspPkt = pframe;
+       u8                      EncryptionHeadOverhead = 0;
+       /* RTW_INFO("%s:%d\n", __FUNCTION__, bForcePowerSave); */
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       fctrl = &pwlanhdr->frame_ctl;
+       *(fctrl) = 0;
+
+       /* ------------------------------------------------------------------------- */
+       /* MAC Header. */
+       /* ------------------------------------------------------------------------- */
+       SetFrameType(fctrl, WIFI_DATA);
+       /* set_frame_sub_type(fctrl, 0); */
+       SetToDs(fctrl);
+       _rtw_memcpy(pwlanhdr->addr1, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, adapter_mac_addr(padapter), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+
+       SetSeqNum(pwlanhdr, 0);
+       set_duration(pwlanhdr, 0);
+
+#ifdef CONFIG_WAPI_SUPPORT
+       *pLength = sMacHdrLng;
+#else
+       *pLength = 24;
+#endif /* CONFIG_WAPI_SUPPORT */
+
+       /* YJ,del,120503 */
+       /* ------------------------------------------------------------------------- */
+       /* Security Header: leave space for it if necessary. */
+       /* ------------------------------------------------------------------------- */
+
+       switch (psecuritypriv->dot11PrivacyAlgrthm) {
+       case _WEP40_:
+       case _WEP104_:
+               EncryptionHeadOverhead = 4;
+               break;
+       case _TKIP_:
+               EncryptionHeadOverhead = 8;
+               break;
+       case _AES_:
+               EncryptionHeadOverhead = 8;
+               break;
+#ifdef CONFIG_WAPI_SUPPORT
+       case _SMS4_:
+               EncryptionHeadOverhead = 18;
+               break;
+#endif /* CONFIG_WAPI_SUPPORT */
+       default:
+               EncryptionHeadOverhead = 0;
+       }
+
+       if (EncryptionHeadOverhead > 0) {
+               _rtw_memset(&(pframe[*pLength]), 0, EncryptionHeadOverhead);
+               *pLength += EncryptionHeadOverhead;
+               /* SET_80211_HDR_WEP(pGTKRspPkt, 1);  */ /* Suggested by CCW. */
+               /* GTK's privacy bit is done by FW */
+               /* SetPrivacy(fctrl); */
+       }
+       /* ------------------------------------------------------------------------- */
+       /* Frame Body. */
+       /* ------------------------------------------------------------------------- */
+       pGTKRspPkt = (u8 *)(pframe + *pLength);
+       /* LLC header */
+       _rtw_memcpy(pGTKRspPkt, LLCHeader, 8);
+       *pLength += 8;
+
+       /* GTK element */
+       pGTKRspPkt += 8;
+
+       /* GTK frame body after LLC, part 1 */
+       _rtw_memcpy(pGTKRspPkt, GTKbody_a, 11);
+       *pLength += 11;
+       pGTKRspPkt += 11;
+       /* GTK frame body after LLC, part 2 */
+       _rtw_memset(&(pframe[*pLength]), 0, 88);
+       *pLength += 88;
+       pGTKRspPkt += 88;
+
+}
+#endif /* CONFIG_GTK_OL */
+
+/* To check if reserved page content is destroyed by beacon beacuse beacon is too large.
+ * 2010.06.23. Added by tynli. */
+void
+CheckFwRsvdPageContent(
+       IN      PADAPTER                Adapter
+)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u32     MaxBcnPageNum;
+
+       if (pHalData->FwRsvdPageStartOffset != 0) {
+               /*MaxBcnPageNum = PageNum_128(pMgntInfo->MaxBeaconSize);
+               RT_ASSERT((MaxBcnPageNum <= pHalData->FwRsvdPageStartOffset),
+                       ("CheckFwRsvdPageContent(): The reserved page content has been"\
+                       "destroyed by beacon!!! MaxBcnPageNum(%d) FwRsvdPageStartOffset(%d)\n!",
+                       MaxBcnPageNum, pHalData->FwRsvdPageStartOffset));*/
+       }
+}
+
+/*
+ * Description: Get the reserved page number in Tx packet buffer.
+ * Retrun value: the page number.
+ * 2012.08.09, by tynli.
+ *   */
+u8
+GetTxBufferRsvdPageNum8812(_adapter *Adapter, bool bWoWLANBoundary)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       u8      RsvdPageNum = 0;
+       u8      TxPageBndy = LAST_ENTRY_OF_TX_PKT_BUFFER_8812; /* default reseved 1 page for the IC type which is undefined. */
+
+       if (bWoWLANBoundary)
+               rtw_hal_get_def_var(Adapter, HAL_DEF_TX_PAGE_BOUNDARY_WOWLAN, (u8 *)&TxPageBndy);
+       else
+               rtw_hal_get_def_var(Adapter, HAL_DEF_TX_PAGE_BOUNDARY, (u8 *)&TxPageBndy);
+
+       RsvdPageNum = LAST_ENTRY_OF_TX_PKT_BUFFER_8812 - TxPageBndy + 1;
+
+       return RsvdPageNum;
+}
+
+/*
+ * Description: Fill the reserved packets that FW will use to RSVD page.
+ *                     Now we just send 4 types packet to rsvd page.
+ *                     (1)Beacon, (2)Ps-poll, (3)Null data, (4)ProbeRsp.
+ *     Input:
+ *         bDLFinished - FALSE: At the first time we will send all the packets as a large packet to Hw,
+ *                                             so we need to set the packet length to total lengh.
+ *                           TRUE: At the second time, we should send the first packet (default:beacon)
+ *                                             to Hw again and set the lengh in descriptor to the real beacon lengh.
+ * 2009.10.15 by tynli. */
+static void SetFwRsvdPagePkt_8812(PADAPTER padapter, BOOLEAN bDLFinished)
+{
+       PHAL_DATA_TYPE pHalData;
+       struct xmit_frame       *pcmdframe;
+       struct pkt_attrib       *pattrib;
+       struct xmit_priv        *pxmitpriv;
+       struct mlme_ext_priv    *pmlmeext;
+       struct mlme_ext_info    *pmlmeinfo;
+       u32     PSPollLength, NullFunctionDataLength, QosNullLength;
+       u32     BcnLen;
+       u8      TotalPageNum = 0, CurtPktPageNum = 0, TxDescLen = 0, RsvdPageNum = 0;
+       u8      *ReservedPagePacket;
+       u8      RsvdPageLoc[5] = {0};
+       u16     BufIndex = 0, PageSize = 256;
+       u32     TotalPacketLen, MaxRsvdPageBufSize = 0;;
+
+
+       /* RTW_INFO("%s\n", __FUNCTION__); */
+
+       pHalData = GET_HAL_DATA(padapter);
+       pxmitpriv = &padapter->xmitpriv;
+       pmlmeext = &padapter->mlmeextpriv;
+       pmlmeinfo = &pmlmeext->mlmext_info;
+
+       if (IS_HARDWARE_TYPE_8812(padapter))
+               PageSize = 512;
+       else if (IS_HARDWARE_TYPE_8821(padapter))
+               PageSize = PAGE_SIZE_TX_8821A;
+
+       /* <tynli_note> The function SetFwRsvdPagePkt_8812() input must be added a value "bDLWholePackets" to */
+       /* decide if download wowlan packets, and use "bDLWholePackets" to be GetTxBufferRsvdPageNum8812() 2nd input value. */
+       RsvdPageNum = GetTxBufferRsvdPageNum8812(padapter, _FALSE);
+       MaxRsvdPageBufSize = RsvdPageNum * PageSize;
+
+       pcmdframe = rtw_alloc_cmdxmitframe(pxmitpriv);
+       if (pcmdframe == NULL)
+               return;
+
+       ReservedPagePacket = pcmdframe->buf_addr;
+
+       TxDescLen = TXDESC_SIZE;/* The desc lengh in Tx packet buffer of 8812A is 40 bytes. */
+
+       /* (1) beacon */
+       BufIndex = TXDESC_OFFSET;
+       ConstructBeacon(padapter, &ReservedPagePacket[BufIndex], &BcnLen);
+
+       /* When we count the first page size, we need to reserve description size for the RSVD */
+       /* packet, it will be filled in front of the packet in TXPKTBUF. */
+       CurtPktPageNum = (u8)PageNum(BcnLen + TxDescLen, PageSize);
+
+       if (bDLFinished) {
+               TotalPageNum += CurtPktPageNum;
+               TotalPacketLen = (TotalPageNum * PageSize);
+               RTW_INFO("%s(): Beacon page size = %d\n", __FUNCTION__, TotalPageNum);
+       } else {
+               TotalPageNum += CurtPktPageNum;
+
+               pHalData->FwRsvdPageStartOffset = TotalPageNum;
+
+               BufIndex += (CurtPktPageNum * PageSize);
+
+               if (BufIndex > MaxRsvdPageBufSize) {
+                       RTW_INFO("%s(): Beacon: The rsvd page size is not enough!!BufIndex %d, MaxRsvdPageBufSize %d\n", __FUNCTION__,
+                                BufIndex, MaxRsvdPageBufSize);
+                       goto error;
+               }
+
+               /* (2) ps-poll */
+               ConstructPSPoll(padapter, &ReservedPagePacket[BufIndex], &PSPollLength);
+               rtl8812a_fill_fake_txdesc(padapter, &ReservedPagePacket[BufIndex - TxDescLen], PSPollLength, _TRUE, _FALSE, _FALSE);
+
+               SET_8812_H2CCMD_RSVDPAGE_LOC_PSPOLL(RsvdPageLoc, TotalPageNum);
+
+               /* RTW_INFO("SetFwRsvdPagePkt_8812(): HW_VAR_SET_TX_CMD: PS-POLL %p %d\n",  */
+               /*      &ReservedPagePacket[BufIndex-TxDescLen], (PSPollLength+TxDescLen)); */
+
+               CurtPktPageNum = (u8)PageNum(PSPollLength + TxDescLen, PageSize);
+
+               BufIndex += (CurtPktPageNum * PageSize);
+
+               TotalPageNum += CurtPktPageNum;
+
+               if (BufIndex > MaxRsvdPageBufSize) {
+                       RTW_INFO("%s(): ps-poll: The rsvd page size is not enough!!BufIndex %d, MaxRsvdPageBufSize %d\n", __FUNCTION__,
+                                BufIndex, MaxRsvdPageBufSize);
+                       goto error;
+               }
+
+               /* (3) null data */
+               ConstructNullFunctionData(
+                       padapter,
+                       &ReservedPagePacket[BufIndex],
+                       &NullFunctionDataLength,
+                       get_my_bssid(&pmlmeinfo->network),
+                       _FALSE, 0, 0, _FALSE);
+               rtl8812a_fill_fake_txdesc(padapter, &ReservedPagePacket[BufIndex - TxDescLen], NullFunctionDataLength, _FALSE, _FALSE, _FALSE);
+
+               SET_8812_H2CCMD_RSVDPAGE_LOC_NULL_DATA(RsvdPageLoc, TotalPageNum);
+
+               /* RTW_INFO("SetFwRsvdPagePkt_8812(): HW_VAR_SET_TX_CMD: NULL DATA %p %d\n",  */
+               /*      &ReservedPagePacket[BufIndex-TxDescLen], (NullFunctionDataLength+TxDescLen)); */
+
+               CurtPktPageNum = (u8)PageNum(NullFunctionDataLength + TxDescLen, PageSize);
+
+               BufIndex += (CurtPktPageNum * PageSize);
+
+               TotalPageNum += CurtPktPageNum;
+
+               if (BufIndex > MaxRsvdPageBufSize) {
+                       RTW_INFO("%s(): Null-data: The rsvd page size is not enough!!BufIndex %d, MaxRsvdPageBufSize %d\n", __FUNCTION__,
+                                BufIndex, MaxRsvdPageBufSize);
+                       goto error;
+               }
+
+               /* (5) Qos null data */
+               ConstructNullFunctionData(
+                       padapter,
+                       &ReservedPagePacket[BufIndex],
+                       &QosNullLength,
+                       get_my_bssid(&pmlmeinfo->network),
+                       _TRUE, 0, 0, _FALSE);
+               rtl8812a_fill_fake_txdesc(padapter, &ReservedPagePacket[BufIndex - TxDescLen], QosNullLength, _FALSE, _FALSE, _FALSE);
+
+               SET_8812_H2CCMD_RSVDPAGE_LOC_QOS_NULL_DATA(RsvdPageLoc, TotalPageNum);
+
+               /* RTW_INFO("SetFwRsvdPagePkt_8812(): HW_VAR_SET_TX_CMD: QOS NULL DATA %p %d\n",  */
+               /*      &ReservedPagePacket[BufIndex-TxDescLen], (QosNullLength+TxDescLen)); */
+
+               CurtPktPageNum = (u8)PageNum(QosNullLength + TxDescLen, PageSize);
+
+               BufIndex += (CurtPktPageNum * PageSize);
+
+               TotalPageNum += CurtPktPageNum;
+
+               TotalPacketLen = (TotalPageNum * PageSize);
+       }
+
+
+       if (TotalPacketLen > MaxRsvdPageBufSize) {
+               RTW_INFO("%s(): ERROR: The rsvd page size is not enough!!TotalPacketLen %d, MaxRsvdPageBufSize %d\n", __FUNCTION__,
+                        TotalPacketLen, MaxRsvdPageBufSize);
+               goto error;
+       } else {
+               /* update attribute */
+               pattrib = &pcmdframe->attrib;
+               update_mgntframe_attrib(padapter, pattrib);
+               pattrib->qsel = QSLT_BEACON;
+               pattrib->pktlen = pattrib->last_txcmdsz = TotalPacketLen - TxDescLen;
+#ifdef CONFIG_PCI_HCI
+               dump_mgntframe(padapter, pcmdframe);
+#else
+               dump_mgntframe_and_wait(padapter, pcmdframe, 100);
+#endif
+       }
+
+       if (!bDLFinished) {
+               RTW_INFO("%s: Set RSVD page location to Fw ,TotalPacketLen(%d), TotalPageNum(%d)\n", __FUNCTION__, TotalPacketLen, TotalPageNum);
+               fill_h2c_cmd_8812(padapter, H2C_8812_RSVDPAGE, 5, RsvdPageLoc);
+       }
+
+       return;
+
+error:
+       rtw_free_xmitframe(pxmitpriv, pcmdframe);
+}
+
+#ifdef CONFIG_P2P_PS
+void rtl8812_set_p2p_ps_offload_cmd(_adapter *padapter, u8 p2p_ps_state)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct pwrctrl_priv             *pwrpriv = adapter_to_pwrctl(padapter);
+       struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
+       u8      *p2p_ps_offload = (u8 *)&pHalData->p2p_ps_offload;
+       u8      i;
+
+       switch (p2p_ps_state) {
+       case P2P_PS_DISABLE:
+               RTW_INFO("P2P_PS_DISABLE\n");
+               _rtw_memset(p2p_ps_offload, 0, 1);
+               break;
+       case P2P_PS_ENABLE:
+               RTW_INFO("P2P_PS_ENABLE\n");
+               /* update CTWindow value. */
+               if (pwdinfo->ctwindow > 0) {
+                       SET_8812_H2CCMD_P2P_PS_OFFLOAD_CTWINDOW_EN(p2p_ps_offload, 1);
+                       rtw_write8(padapter, REG_P2P_CTWIN, pwdinfo->ctwindow);
+               }
+
+               /* hw only support 2 set of NoA */
+               for (i = 0 ; i < pwdinfo->noa_num ; i++) {
+                       /* To control the register setting for which NOA */
+                       rtw_write8(padapter, REG_NOA_DESC_SEL, (i << 4));
+                       if (i == 0)
+                               SET_8812_H2CCMD_P2P_PS_OFFLOAD_NOA0_EN(p2p_ps_offload, 1);
+                       else
+                               SET_8812_H2CCMD_P2P_PS_OFFLOAD_NOA1_EN(p2p_ps_offload, 1);
+
+                       /* config P2P NoA Descriptor Register */
+                       /* RTW_INFO("%s(): noa_duration = %x\n",__FUNCTION__,pwdinfo->noa_duration[i]); */
+                       rtw_write32(padapter, REG_NOA_DESC_DURATION, pwdinfo->noa_duration[i]);
+
+                       /* RTW_INFO("%s(): noa_interval = %x\n",__FUNCTION__,pwdinfo->noa_interval[i]); */
+                       rtw_write32(padapter, REG_NOA_DESC_INTERVAL, pwdinfo->noa_interval[i]);
+
+                       /* RTW_INFO("%s(): start_time = %x\n",__FUNCTION__,pwdinfo->noa_start_time[i]); */
+                       rtw_write32(padapter, REG_NOA_DESC_START, pwdinfo->noa_start_time[i]);
+
+                       /* RTW_INFO("%s(): noa_count = %x\n",__FUNCTION__,pwdinfo->noa_count[i]); */
+                       rtw_write8(padapter, REG_NOA_DESC_COUNT, pwdinfo->noa_count[i]);
+               }
+
+               if ((pwdinfo->opp_ps == 1) || (pwdinfo->noa_num > 0)) {
+                       /* rst p2p circuit */
+                       rtw_write8(padapter, REG_DUAL_TSF_RST, BIT(4));
+
+                       SET_8812_H2CCMD_P2P_PS_OFFLOAD_ENABLE(p2p_ps_offload, 1);
+
+                       if (pwdinfo->role == P2P_ROLE_GO) {
+                               /* 1: Owner, 0: Client */
+                               SET_8812_H2CCMD_P2P_PS_OFFLOAD_ROLE(p2p_ps_offload, 1);
+                               SET_8812_H2CCMD_P2P_PS_OFFLOAD_ALLSTASLEEP(p2p_ps_offload, 0);
+                       } else {
+                               /* 1: Owner, 0: Client */
+                               SET_8812_H2CCMD_P2P_PS_OFFLOAD_ROLE(p2p_ps_offload, 0);
+                       }
+
+                       SET_8812_H2CCMD_P2P_PS_OFFLOAD_DISCOVERY(p2p_ps_offload, 0);
+               }
+               break;
+       case P2P_PS_SCAN:
+               RTW_INFO("P2P_PS_SCAN\n");
+               SET_8812_H2CCMD_P2P_PS_OFFLOAD_DISCOVERY(p2p_ps_offload, 1);
+               break;
+       case P2P_PS_SCAN_DONE:
+               RTW_INFO("P2P_PS_SCAN_DONE\n");
+               SET_8812_H2CCMD_P2P_PS_OFFLOAD_DISCOVERY(p2p_ps_offload, 0);
+               pwdinfo->p2p_ps_state = P2P_PS_ENABLE;
+               break;
+       default:
+               break;
+       }
+
+       RTW_INFO("P2P_PS_OFFLOAD : %x\n", p2p_ps_offload[0]);
+       fill_h2c_cmd_8812(padapter, H2C_8812_P2P_PS_OFFLOAD, 1, p2p_ps_offload);
+}
+#endif /* CONFIG_P2P */
+
+#ifdef CONFIG_TSF_RESET_OFFLOAD
+/*
+       ask FW to Reset sync register at Beacon early interrupt
+*/
+u8 rtl8812_reset_tsf(_adapter *padapter, u8 reset_port)
+{
+       u8      buf[2];
+       u8      res = _SUCCESS;
+
+       s32 ret;
+       if (HW_PORT0 == reset_port) {
+               buf[0] = 0x1;
+               buf[1] = 0;
+       } else {
+               buf[0] = 0x0;
+               buf[1] = 0x1;
+       }
+
+       ret = fill_h2c_cmd_8812(padapter, H2C_8812_TSF_RESET, 2, buf);
+
+
+       return res;
+}
+
+int reset_tsf(PADAPTER Adapter, u8 reset_port)
+{
+       u8 reset_cnt_before = 0, reset_cnt_after = 0, loop_cnt = 0;
+       u32 reg_reset_tsf_cnt = (HW_PORT0 == reset_port) ?
+                               REG_FW_RESET_TSF_CNT_0 : REG_FW_RESET_TSF_CNT_1;
+       u32 reg_bcncrtl = (HW_PORT0 == reset_port) ?
+                         REG_BCN_CTRL_1 : REG_BCN_CTRL;
+
+       rtw_mi_buddy_scan_abort(Adapter, _FALSE);       /*      site survey will cause reset_tsf fail   */
+       reset_cnt_after = reset_cnt_before = rtw_read8(Adapter, reg_reset_tsf_cnt);
+       rtl8812_reset_tsf(Adapter, reset_port);
+
+       while ((reset_cnt_after == reset_cnt_before) && (loop_cnt < 10)) {
+               rtw_msleep_os(100);
+               loop_cnt++;
+               reset_cnt_after = rtw_read8(Adapter, reg_reset_tsf_cnt);
+       }
+
+       return (loop_cnt >= 10) ? _FAIL : _TRUE;
+}
+
+
+#endif /* CONFIG_TSF_RESET_OFFLOAD */
+
+static void rtl8812_set_FwRsvdPage_cmd(PADAPTER padapter, PRSVDPAGE_LOC rsvdpageloc)
+{
+       u8 u1H2CRsvdPageParm[H2C_RSVDPAGE_LOC_LEN] = {0};
+
+       RTW_INFO("8812au/8821/8811 RsvdPageLoc: ProbeRsp=%d PsPoll=%d Null=%d QoSNull=%d BTNull=%d\n",
+                rsvdpageloc->LocProbeRsp, rsvdpageloc->LocPsPoll,
+                rsvdpageloc->LocNullData, rsvdpageloc->LocQosNull,
+                rsvdpageloc->LocBTQosNull);
+
+       SET_H2CCMD_RSVDPAGE_LOC_PROBE_RSP(u1H2CRsvdPageParm, rsvdpageloc->LocProbeRsp);
+       SET_H2CCMD_RSVDPAGE_LOC_PSPOLL(u1H2CRsvdPageParm, rsvdpageloc->LocPsPoll);
+       SET_H2CCMD_RSVDPAGE_LOC_NULL_DATA(u1H2CRsvdPageParm, rsvdpageloc->LocNullData);
+       SET_H2CCMD_RSVDPAGE_LOC_QOS_NULL_DATA(u1H2CRsvdPageParm, rsvdpageloc->LocQosNull);
+       SET_H2CCMD_RSVDPAGE_LOC_BT_QOS_NULL_DATA(u1H2CRsvdPageParm, rsvdpageloc->LocBTQosNull);
+
+       RTW_DBG_DUMP("u1H2CRsvdPageParm:", u1H2CRsvdPageParm, H2C_RSVDPAGE_LOC_LEN);
+       fill_h2c_cmd_8812(padapter, H2C_RSVD_PAGE, H2C_RSVDPAGE_LOC_LEN, u1H2CRsvdPageParm);
+}
+
+
+
+#if defined(CONFIG_WOWLAN) || defined(CONFIG_AP_WOWLAN)
+
+static void rtl8812_set_FwAoacRsvdPage_cmd(PADAPTER padapter, PRSVDPAGE_LOC rsvdpageloc)
+{
+       struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       u8      res = 0, count = 0;
+#ifdef CONFIG_WOWLAN
+       u8 u1H2CAoacRsvdPageParm[H2C_AOAC_RSVDPAGE_LOC_LEN] = {0};
+
+       RTW_INFO("8192EAOACRsvdPageLoc: RWC=%d ArpRsp=%d NbrAdv=%d GtkRsp=%d GtkInfo=%d ProbeReq=%d NetworkList=%d\n",
+                rsvdpageloc->LocRemoteCtrlInfo, rsvdpageloc->LocArpRsp,
+                rsvdpageloc->LocNbrAdv, rsvdpageloc->LocGTKRsp,
+                rsvdpageloc->LocGTKInfo, rsvdpageloc->LocProbeReq,
+                rsvdpageloc->LocNetList);
+
+#ifdef CONFIG_PNO_SUPPORT
+       RTW_INFO("NLO_INFO=%d\n", rsvdpageloc->LocPNOInfo);
+#endif
+       if (check_fwstate(pmlmepriv, _FW_LINKED)) {
+               SET_H2CCMD_AOAC_RSVDPAGE_LOC_REMOTE_WAKE_CTRL_INFO(u1H2CAoacRsvdPageParm, rsvdpageloc->LocRemoteCtrlInfo);
+               SET_H2CCMD_AOAC_RSVDPAGE_LOC_ARP_RSP(u1H2CAoacRsvdPageParm, rsvdpageloc->LocArpRsp);
+               /* SET_H2CCMD_AOAC_RSVDPAGE_LOC_NEIGHBOR_ADV(u1H2CAoacRsvdPageParm, rsvdpageloc->LocNbrAdv); */
+               SET_H2CCMD_AOAC_RSVDPAGE_LOC_GTK_RSP(u1H2CAoacRsvdPageParm, rsvdpageloc->LocGTKRsp);
+               SET_H2CCMD_AOAC_RSVDPAGE_LOC_GTK_INFO(u1H2CAoacRsvdPageParm, rsvdpageloc->LocGTKInfo);
+#ifdef CONFIG_GTK_OL
+               SET_H2CCMD_AOAC_RSVDPAGE_LOC_GTK_EXT_MEM(u1H2CAoacRsvdPageParm, rsvdpageloc->LocGTKEXTMEM);
+#endif /* CONFIG_GTK_OL */
+       } else {
+#ifdef CONFIG_PNO_SUPPORT
+               if (!pwrpriv->wowlan_in_resume)
+                       SET_H2CCMD_AOAC_RSVDPAGE_LOC_NLO_INFO(u1H2CAoacRsvdPageParm, rsvdpageloc->LocPNOInfo);
+#endif
+       }
+
+       RTW_DBG_DUMP("u1H2CAoacRsvdPageParm:", u1H2CAoacRsvdPageParm, H2C_AOAC_RSVDPAGE_LOC_LEN);
+       fill_h2c_cmd_8812(padapter, H2C_AOAC_RSVD_PAGE, H2C_AOAC_RSVDPAGE_LOC_LEN, u1H2CAoacRsvdPageParm);
+
+#ifdef CONFIG_PNO_SUPPORT
+       if (!check_fwstate(pmlmepriv, WIFI_AP_STATE) &&
+           !check_fwstate(pmlmepriv, _FW_LINKED) &&
+           pwrpriv->wowlan_in_resume == _FALSE) {
+
+               res = rtw_read8(padapter, 0x1b8);
+               while (res == 0 && count < 25) {
+                       RTW_INFO("[%d] FW loc_NLOInfo: %d\n", count, res);
+                       res = rtw_read8(padapter, 0x1b8);
+                       count++;
+                       rtw_msleep_os(2);
+               }
+       }
+#endif /* CONFIG_PNO_SUPPORT */
+#endif /* CONFIG_WOWLAN */
+}
+#endif
+
+void rtl8812_set_FwJoinBssReport_cmd(PADAPTER padapter, u8 mstatus)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
+       BOOLEAN         bSendBeacon = _FALSE;
+       BOOLEAN         bcn_valid = _FALSE;
+       u8      DLBcnCount = 0;
+       u32 poll = 0;
+
+
+       RTW_INFO("%s mstatus(%x)\n", __func__ , mstatus);
+
+       if (mstatus == 1) {
+               /*
+               * We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C.
+               * Suggested by filen. Added by tynli.
+               */
+               rtw_write16(padapter, REG_BCN_PSR_RPT, (0xC000 | pmlmeinfo->aid));
+               /*
+               * Do not set TSF again here or vWiFi beacon DMA INT will not work.
+               * correct_TSF(padapter, pmlmeext);
+               * Hw sequende enable by dedault. 2010.06.23. by tynli.
+               * rtw_write16(padapter, REG_NQOS_SEQ, ((pmlmeext->mgnt_seq+100)&0xFFF));
+               * rtw_write8(padapter, REG_HWSEQ_CTRL, 0xFF);
+               */
+
+               /*Set REG_CR bit 8. DMA beacon by SW.*/
+               pHalData->RegCR_1 |= BIT0;
+               rtw_write8(padapter ,  REG_CR + 1 , pHalData->RegCR_1);
+
+               /*
+               * Disable Hw protection for a time which revserd for Hw sending beacon.
+               *  Fix download reserved page packet fail that access collision with the protection time.
+               * 2010.05.11. Added by tynli.
+               * SetBcnCtrlReg(padapter, 0, BIT3);
+               * SetBcnCtrlReg(padapter, BIT4, 0);
+               */
+               rtw_write8(padapter, REG_BCN_CTRL , rtw_read8(padapter , REG_BCN_CTRL) & (~BIT(3)));
+               rtw_write8(padapter, REG_BCN_CTRL , rtw_read8(padapter , REG_BCN_CTRL) | BIT(4));
+
+               if (pHalData->RegFwHwTxQCtrl & BIT6) {
+                       RTW_INFO("HalDownloadRSVDPage(): There is an Adapter is sending beacon.\n");
+                       bSendBeacon = _TRUE;
+               }
+
+               /* Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame.*/
+               rtw_write8(padapter , REG_FWHW_TXQ_CTRL + 2 , (pHalData->RegFwHwTxQCtrl & (~BIT6)));
+               pHalData->RegFwHwTxQCtrl &= (~BIT6);
+
+               /* Clear beacon valid check bit.*/
+               rtw_hal_set_hwreg(padapter , HW_VAR_BCN_VALID, NULL);
+               DLBcnCount = 0;
+               poll = 0;
+               do {
+                       rtw_hal_set_fw_rsvd_page(padapter , _FALSE);
+                       DLBcnCount++;
+                       do {
+                               rtw_yield_os();
+                               /*rtw_mdelay_os(10);*/
+                               /* check rsvd page download OK.*/
+                               rtw_hal_get_hwreg(padapter , HW_VAR_BCN_VALID , (u8 *)(&bcn_valid));
+                               poll++;
+                       } while (!bcn_valid && (poll % 10) != 0 && !RTW_CANNOT_RUN(padapter));
+
+               } while (!bcn_valid && DLBcnCount <= 100 && !RTW_CANNOT_RUN(padapter));
+
+               /*RT_ASSERT(bcn_valid, ("HalDownloadRSVDPage88ES(): 1 Download RSVD page failed!\n"));*/
+               if (RTW_CANNOT_RUN(padapter))
+                       RTW_INFO("%s bSurpriseRemoved:%s, bDriverStopped:%s\n"
+                                , __func__
+                               , rtw_is_surprise_removed(padapter) ? "True" : "False"
+                               , rtw_is_drv_stopped(padapter) ? "True" : "False");
+               else if (!bcn_valid)
+                       RTW_INFO(ADPT_FMT": 1 DL RSVD page failed! DLBcnCount:%u, poll:%u\n",
+                                ADPT_ARG(padapter) , DLBcnCount , poll);
+               else {
+                       struct pwrctrl_priv *pwrctl = adapter_to_pwrctl(padapter);
+
+                       pwrctl->fw_psmode_iface_id = padapter->iface_id;
+                       RTW_INFO(ADPT_FMT": 1 DL RSVD page success! DLBcnCount:%u, poll:%u\n",
+                                ADPT_ARG(padapter) , DLBcnCount , poll);
+               }
+               /*
+               * We just can send the reserved page twice during the time that Tx thread is stopped (e.g. pnpsetpower)
+               * because we need to free the Tx BCN Desc which is used by the first reserved page packet.
+               * At run time, we cannot get the Tx Desc until it is released in TxHandleInterrupt() so we will return
+               * the beacon TCB in the following code. 2011.11.23. by tynli.
+               */
+               /*if(bcn_valid && padapter->bEnterPnpSleep)*/
+               if (0) {
+                       if (bSendBeacon) {
+                               rtw_hal_set_hwreg(padapter , HW_VAR_BCN_VALID, NULL);
+                               DLBcnCount = 0;
+                               poll = 0;
+                               do {
+                                       /*SetFwRsvdPagePkt_8812(padapter, _TRUE);*/
+                                       rtw_hal_set_fw_rsvd_page(padapter , _TRUE);
+                                       DLBcnCount++;
+
+                                       do {
+                                               rtw_yield_os();
+                                               /*rtw_mdelay_os(10);*/
+                                               /* check rsvd page download OK.*/
+                                               rtw_hal_get_hwreg(padapter , HW_VAR_BCN_VALID , (u8 *)(&bcn_valid));
+                                               poll++;
+                                       } while (!bcn_valid && (poll % 10) != 0 && !RTW_CANNOT_RUN(padapter));
+                               } while (!bcn_valid && DLBcnCount <= 100 && !RTW_CANNOT_RUN(padapter));
+
+                               /*RT_ASSERT(bcn_valid, ("HalDownloadRSVDPage(): 2 Download RSVD page failed!\n"));*/
+                               if (RTW_CANNOT_RUN(padapter))
+                                       RTW_INFO("%s bSurpriseRemoved:%s, bDriverStopped:%s\n"
+                                                , __func__
+                                               , rtw_is_surprise_removed(padapter) ? "True" : "False"
+                                               , rtw_is_drv_stopped(padapter) ? "True" : "False");
+                               else if (!bcn_valid)
+                                       RTW_INFO("%s: 2 Download RSVD page failed! DLBcnCount:%u, poll:%u\n" , __func__ , DLBcnCount , poll);
+                               else
+                                       RTW_INFO("%s: 2 Download RSVD success! DLBcnCount:%u, poll:%u\n" , __func__ , DLBcnCount , poll);
+                       }
+               }
+
+               /* Enable Bcn*/
+               /*SetBcnCtrlReg(padapter, BIT3, 0);*/
+               /*SetBcnCtrlReg(padapter, 0, BIT4);*/
+               rtw_write8(padapter , REG_BCN_CTRL , rtw_read8(padapter , REG_BCN_CTRL) | BIT(3));
+               rtw_write8(padapter , REG_BCN_CTRL , rtw_read8(padapter , REG_BCN_CTRL) & (~BIT(4)));
+
+               /*
+               * To make sure that if there exists an adapter which would like to send beacon.
+               * If exists, the origianl value of 0x422[6] will be 1, we should check this to
+               * prevent from setting 0x422[6] to 0 after download reserved page, or it will cause
+               * the beacon cannot be sent by HW.
+               * 2010.06.23. Added by tynli.
+               */
+               if (bSendBeacon) {
+                       rtw_write8(padapter , REG_FWHW_TXQ_CTRL + 2 , (pHalData->RegFwHwTxQCtrl | BIT6));
+                       pHalData->RegFwHwTxQCtrl |= BIT6;
+               }
+
+
+               /* Update RSVD page location H2C to Fw.*/
+               if (bcn_valid) {
+                       rtw_hal_set_hwreg(padapter , HW_VAR_BCN_VALID , NULL);
+                       RTW_INFO("Set RSVD page location to Fw.\n");
+                       /*FillH2CCmd88E(Adapter, H2C_88E_RSVDPAGE, H2C_RSVDPAGE_LOC_LENGTH, pMgntInfo->u1RsvdPageLoc);*/
+               }
+
+               /* Do not enable HW DMA BCN or it will cause Pcie interface hang by timing issue. 2011.11.24. by tynli.*/
+               /*if(!padapter->bEnterPnpSleep)*/
+               {
+#ifndef CONFIG_PCI_HCI
+                       /* Clear CR[8] or beacon packet will not be send to TxBuf anymore.*/
+                       pHalData->RegCR_1 &= (~BIT0);
+                       rtw_write8(padapter,  REG_CR + 1 , pHalData->RegCR_1);
+#endif
+               }
+       }
+
+}
+
+static void
+C2HTxBeamformingHandler_8812(
+       IN      PADAPTER                Adapter,
+       IN      u8                              *CmdBuf,
+       IN      u8                              CmdLen
+)
+{
+       u8      status = CmdBuf[0] & BIT0;
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(Adapter);
+       struct PHY_DM_STRUCT            *pDM_Odm = &pHalData->odmpriv;
+
+#ifdef CONFIG_BEAMFORMING
+
+#if (BEAMFORMING_SUPPORT == 1)
+       struct _RT_BEAMFORMING_INFO     *p_beam_info = &pDM_Odm->beamforming_info;
+       struct _RT_SOUNDING_INFO                *pSoundInfo = &(p_beam_info->sounding_info);
+
+       if (pSoundInfo->sound_mode == SOUNDING_FW_VHT_TIMER) {
+               RTW_INFO("SOUNDING_FW_VHT_TIMER\n");
+               beamforming_check_sounding_success(pDM_Odm, status);
+       } else {
+               RTW_INFO("SOUNDING_SW_VHT_TIMER\n");
+               phydm_beamforming_end_sw(pDM_Odm, status);
+       }
+#else /*(BEAMFORMING_SUPPORT == 0) - drv beamforming*/
+       beamforming_check_sounding_success(Adapter, status);
+#if (0)/*DEV_BUS_TYPE == RT_PCI_INTERFACE)*/
+       beamforming_end_fw(Adapter, status);
+#endif
+#endif
+
+#endif /*#ifdef CONFIG_BEAMFORMING*/
+}
+
+static void
+C2HTxFeedbackHandler_8812(
+       IN      PADAPTER        Adapter,
+       IN      u8                      *CmdBuf,
+       IN      u8                      CmdLen
+)
+{
+#ifdef CONFIG_XMIT_ACK
+       if (GET_8812_C2H_TX_RPT_RETRY_OVER(CmdBuf) | GET_8812_C2H_TX_RPT_LIFE_TIME_OVER(CmdBuf))
+               rtw_ack_tx_done(&Adapter->xmitpriv, RTW_SCTX_DONE_CCX_PKT_FAIL);
+       else
+               rtw_ack_tx_done(&Adapter->xmitpriv, RTW_SCTX_DONE_SUCCESS);
+#endif
+}
+
+s32 c2h_handler_8812a(_adapter *adapter, u8 id, u8 seq, u8 plen, u8 *payload)
+{
+       s32 ret = _SUCCESS;
+
+       switch (id) {
+       case C2H_TXBF:
+               RTW_INFO("[C2H], C2H_TXBF!!\n");
+               C2HTxBeamformingHandler_8812(adapter, payload, plen);
+               break;
+       case C2H_CCX_TX_RPT:
+               C2HTxFeedbackHandler_8812(adapter, payload, plen);
+               break;
+       default:
+               ret = _FAIL;
+               break;
+       }
+
+exit:
+       return ret;
+}
+
+#ifdef CONFIG_BT_COEXIST
+
+void ConstructBtNullFunctionData(
+       PADAPTER padapter,
+       u8              *pframe,
+       u32             *pLength,
+       u8              *StaAddr,
+       u8              bQoS,
+       u8              AC,
+       u8              bEosp,
+       u8              bForcePowerSave)
+{
+       struct rtw_ieee80211_hdr        *pwlanhdr;
+       __le16 *fctrl;
+       u32                                             pktlen;
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       u8 bssid[ETH_ALEN];
+
+       /* RTW_INFO("%s:%d\n", __FUNCTION__, bForcePowerSave); */
+
+       pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
+
+       if (NULL == StaAddr) {
+               _rtw_memcpy(bssid, adapter_mac_addr(padapter), ETH_ALEN);
+               StaAddr = bssid;
+       }
+
+       fctrl = &pwlanhdr->frame_ctl;
+       *(fctrl) = 0;
+       if (bForcePowerSave)
+               SetPwrMgt(fctrl);
+
+       SetFrDs(fctrl);
+       _rtw_memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr2, get_my_bssid(&(pmlmeinfo->network)), ETH_ALEN);
+       _rtw_memcpy(pwlanhdr->addr3, adapter_mac_addr(padapter), ETH_ALEN);
+
+       set_duration(pwlanhdr, 0);
+       SetSeqNum(pwlanhdr, 0);
+
+       if (bQoS == _TRUE) {
+               struct rtw_ieee80211_hdr_3addr_qos *pwlanqoshdr;
+
+               set_frame_sub_type(pframe, WIFI_QOS_DATA_NULL);
+
+               pwlanqoshdr = (struct rtw_ieee80211_hdr_3addr_qos *)pframe;
+               SetPriority(&pwlanqoshdr->qc, AC);
+               SetEOSP(&pwlanqoshdr->qc, bEosp);
+
+               pktlen = sizeof(struct rtw_ieee80211_hdr_3addr_qos);
+       } else {
+               set_frame_sub_type(pframe, WIFI_DATA_NULL);
+
+               pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
+       }
+
+       *pLength = pktlen;
+}
+
+
+static void SetFwRsvdPagePkt_BTCoex(PADAPTER padapter)
+{
+       PHAL_DATA_TYPE pHalData;
+       struct xmit_frame       *pcmdframe;
+       struct pkt_attrib       *pattrib;
+       struct xmit_priv        *pxmitpriv;
+       struct mlme_ext_priv    *pmlmeext;
+       struct mlme_ext_info    *pmlmeinfo;
+       struct pwrctrl_priv *pwrctl;
+       struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
+       u32     BeaconLength = 0;
+       u32     NullDataLength = 0, QosNullLength = 0, BTQosNullLength = 0;
+       u32     ProbeReqLength = 0;
+       u8      *ReservedPagePacket;
+       u8      TxDescLen = TXDESC_SIZE, TxDescOffset = TXDESC_OFFSET;
+       u8      TotalPageNum = 0, CurtPktPageNum = 0, RsvdPageNum = 0;
+       u16     BufIndex, PageSize = 256;
+       u32     TotalPacketLen, MaxRsvdPageBufSize = 0;
+       RSVDPAGE_LOC    RsvdPageLoc;
+
+
+       if (IS_HARDWARE_TYPE_8812(padapter))
+               PageSize = 512;
+       else if (IS_HARDWARE_TYPE_8821(padapter))
+               PageSize = PAGE_SIZE_TX_8821A;
+       /* RTW_INFO("%s---->\n", __FUNCTION__); */
+
+       pHalData = GET_HAL_DATA(padapter);
+
+       pxmitpriv = &padapter->xmitpriv;
+       pmlmeext = &padapter->mlmeextpriv;
+       pmlmeinfo = &pmlmeext->mlmext_info;
+       pwrctl = adapter_to_pwrctl(padapter);
+
+       /* RsvdPageNum = BCNQ_PAGE_NUM_8723B + WOWLAN_PAGE_NUM_8723B; */
+
+       if (IS_HARDWARE_TYPE_8812(padapter))
+               RsvdPageNum = BCNQ_PAGE_NUM_8812;
+       else if (IS_HARDWARE_TYPE_8821(padapter))
+               RsvdPageNum = BCNQ_PAGE_NUM_8821;
+       MaxRsvdPageBufSize = RsvdPageNum * PageSize;
+
+       pcmdframe = rtw_alloc_cmdxmitframe(pxmitpriv);
+       if (pcmdframe == NULL) {
+               RTW_INFO("%s: alloc ReservedPagePacket fail!\n", __FUNCTION__);
+               return;
+       }
+
+       ReservedPagePacket = pcmdframe->buf_addr;
+       _rtw_memset(&RsvdPageLoc, 0, sizeof(RSVDPAGE_LOC));
+
+       /* 3 (1) beacon */
+       BufIndex = TxDescOffset;
+       ConstructBeacon(padapter, &ReservedPagePacket[BufIndex], &BeaconLength);
+
+       /* When we count the first page size, we need to reserve description size for the RSVD */
+       /* packet, it will be filled in front of the packet in TXPKTBUF. */
+       CurtPktPageNum = (u8)PageNum(TxDescLen + BeaconLength, PageSize);
+
+       /* If we don't add 1 more page, the WOWLAN function has a problem. Baron thinks it's a bug of firmware */
+       if (CurtPktPageNum == 1)
+               CurtPktPageNum += 1;
+       TotalPageNum += CurtPktPageNum;
+
+       BufIndex += (CurtPktPageNum * PageSize);
+
+       /* Jump to lastest third page *;RESERV 2 PAGES for TxBF NDPA */
+       if (BufIndex < (MaxRsvdPageBufSize - PageSize)) {
+               BufIndex = TxDescOffset + (MaxRsvdPageBufSize - PageSize);
+               if (IS_HARDWARE_TYPE_8812(padapter))
+                       TotalPageNum = BCNQ_PAGE_NUM_8812 - 2;
+               else if (IS_HARDWARE_TYPE_8821(padapter))
+                       TotalPageNum = BCNQ_PAGE_NUM_8821 - 2;
+
+       }
+
+       /* 3 (6) BT Qos null data */
+       RsvdPageLoc.LocBTQosNull = TotalPageNum;
+       ConstructBtNullFunctionData(
+               padapter,
+               &ReservedPagePacket[BufIndex],
+               &BTQosNullLength,
+               NULL,
+               _TRUE, 0, 0, _FALSE);
+       rtl8812a_fill_fake_txdesc(padapter, &ReservedPagePacket[BufIndex - TxDescLen], BTQosNullLength, _FALSE, _TRUE,  _FALSE);
+
+       /* RTW_INFO("%s(): HW_VAR_SET_TX_CMD: BT QOS NULL DATA %p %d\n",  */
+       /*      __FUNCTION__, &ReservedPagePacket[BufIndex-TxDescLen], (BTQosNullLength+TxDescLen)); */
+
+       CurtPktPageNum = (u8)PageNum(TxDescLen + BTQosNullLength, PageSize);
+
+       TotalPageNum += CurtPktPageNum;
+
+       TotalPacketLen = BufIndex + BTQosNullLength;
+       if (TotalPacketLen > MaxRsvdPageBufSize) {
+               RTW_INFO("%s(): ERROR: The rsvd page size is not enough!!TotalPacketLen %d, MaxRsvdPageBufSize %d\n", __FUNCTION__,
+                        TotalPacketLen, MaxRsvdPageBufSize);
+               goto error;
+       } else {
+               /* update attribute */
+               pattrib = &pcmdframe->attrib;
+               update_mgntframe_attrib(padapter, pattrib);
+               pattrib->qsel = QSLT_BEACON;
+               pattrib->pktlen = pattrib->last_txcmdsz = TotalPacketLen - TxDescOffset;
+#ifdef CONFIG_PCI_HCI
+               dump_mgntframe(padapter, pcmdframe);
+#else
+               dump_mgntframe_and_wait(padapter, pcmdframe, 100);
+#endif
+       }
+
+       RTW_INFO("%s: Set RSVD page location to Fw ,TotalPacketLen(%d), TotalPageNum(%d)\n", __FUNCTION__, TotalPacketLen, TotalPageNum);
+       if (check_fwstate(pmlmepriv, _FW_LINKED)) {
+               rtl8812_set_FwRsvdPage_cmd(padapter, &RsvdPageLoc);
+#ifdef CONFIG_WOWLAN
+               rtl8812_set_FwAoacRsvdPage_cmd(padapter, &RsvdPageLoc);
+#endif
+       }
+
+       return;
+
+error:
+
+       rtw_free_xmitframe(pxmitpriv, pcmdframe);
+}
+
+
+void rtl8812a_download_BTCoex_AP_mode_rsvd_page(PADAPTER padapter)
+{
+       HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
+       struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
+       struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
+       struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
+       BOOLEAN bRecover = _FALSE;
+       BOOLEAN bcn_valid = _FALSE;
+       u8      DLBcnCount = 0;
+       u32 poll = 0;
+       u8 val8;
+       u8 v8;
+
+
+       RTW_INFO("+" FUNC_ADPT_FMT ": hw_port=%d\n",
+               FUNC_ADPT_ARG(padapter), get_hw_port(padapter));
+
+       /* We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C. */
+       /* Suggested by filen. Added by tynli. */
+       rtw_write16(padapter, REG_BCN_PSR_RPT, (0xC000 | pmlmeinfo->aid));
+
+       /* set REG_CR bit 8 */
+       v8 = rtw_read8(padapter, REG_CR + 1);
+       v8 |= BIT(0); /* ENSWBCN */
+       rtw_write8(padapter,  REG_CR + 1, v8);
+
+       /* Disable Hw protection for a time which revserd for Hw sending beacon. */
+       /* Fix download reserved page packet fail that access collision with the protection time. */
+       /* 2010.05.11. Added by tynli. */
+       val8 = rtw_read8(padapter, REG_BCN_CTRL);
+       val8 &= ~BIT(3);
+       val8 |= BIT(4);
+       rtw_write8(padapter, REG_BCN_CTRL, val8);
+
+       /* Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame. */
+       if (pHalData->RegFwHwTxQCtrl & BIT(6))
+               bRecover = _TRUE;
+
+       /* To tell Hw the packet is not a real beacon frame. */
+       rtw_write8(padapter, REG_FWHW_TXQ_CTRL + 2, pHalData->RegFwHwTxQCtrl & ~BIT(6));
+       pHalData->RegFwHwTxQCtrl &= ~BIT(6);
+
+       /* Clear beacon valid check bit. */
+       rtw_hal_set_hwreg(padapter, HW_VAR_BCN_VALID, NULL);
+       rtw_hal_set_hwreg(padapter, HW_VAR_DL_BCN_SEL, NULL);
+
+       DLBcnCount = 0;
+       poll = 0;
+       do {
+               SetFwRsvdPagePkt_BTCoex(padapter);
+               DLBcnCount++;
+               do {
+                       rtw_yield_os();
+                       /* rtw_mdelay_os(10); */
+                       /* check rsvd page download OK. */
+                       rtw_hal_get_hwreg(padapter, HW_VAR_BCN_VALID, (u8 *)(&bcn_valid));
+                       poll++;
+               } while (!bcn_valid && (poll % 10) != 0 && !RTW_CANNOT_RUN(padapter));
+
+       } while (!bcn_valid && DLBcnCount <= 100 && !RTW_CANNOT_RUN(padapter));
+
+       if (RTW_CANNOT_RUN(padapter))
+               ;
+       else if (!bcn_valid)
+               RTW_INFO(ADPT_FMT": 1 DL RSVD page failed! DLBcnCount:%u, poll:%u\n",
+                        ADPT_ARG(padapter) , DLBcnCount, poll);
+       else {
+               struct pwrctrl_priv *pwrctl = adapter_to_pwrctl(padapter);
+               pwrctl->fw_psmode_iface_id = padapter->iface_id;
+               RTW_INFO(ADPT_FMT": 1 DL RSVD page success! DLBcnCount:%u, poll:%u\n",
+                        ADPT_ARG(padapter), DLBcnCount, poll);
+       }
+
+       /* 2010.05.11. Added by tynli. */
+       val8 = rtw_read8(padapter, REG_BCN_CTRL);
+       val8 |= BIT(3);
+       val8 &= ~BIT(4);
+       rtw_write8(padapter, REG_BCN_CTRL, val8);
+
+       /* To make sure that if there exists an adapter which would like to send beacon. */
+       /* If exists, the origianl value of 0x422[6] will be 1, we should check this to */
+       /* prevent from setting 0x422[6] to 0 after download reserved page, or it will cause */
+       /* the beacon cannot be sent by HW. */
+       /* 2010.06.23. Added by tynli. */
+       if (bRecover) {
+               rtw_write8(padapter, REG_FWHW_TXQ_CTRL + 2, pHalData->RegFwHwTxQCtrl | BIT(6));
+               pHalData->RegFwHwTxQCtrl |= BIT(6);
+       }
+
+#ifndef CONFIG_PCI_HCI
+       /* Clear CR[8] or beacon packet will not be send to TxBuf anymore. */
+       v8 = rtw_read8(padapter, REG_CR + 1);
+       v8 &= ~BIT(0); /* ~ENSWBCN */
+       rtw_write8(padapter, REG_CR + 1, v8);
+#endif
+
+
+}
+
+#endif /* CONFIG_BT_COEXIST */