[*] Binary protection state of com.axis.CaptureMode1
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of com.axis.CaptureMode1
sw s6, 0x38(sp)
sw s5, 0x34(sp)
sw s4, 0x30(sp)
sw s3, 0x2c(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw zero, 0x18(sp)
sw v0, 0x1c(sp)
jalr t9
move s0, a0
lw gp, 0x10(sp)
move a0, s0
move s1, v0
lw t9, -sym.imp.g_dbus_method_invocation_get_interface_name(gp)
jalr t9
addiu s5, sp, 0x18
lw gp, 0x10(sp)
move a0, s0
lw t9, -sym.imp.g_dbus_method_invocation_get_method_name(gp)
jalr t9
move s4, v0
lw gp, 0x10(sp)
move a2, v0
move a1, s4
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, 0xb90
jalr t9
move s6, v0
lw gp, 0x10(sp)
move a0, s1
move a2, s5
lw t9, -sym.imp.apac_check_auth(gp)
move a1, v0
jalr t9
move s3, v0
lw gp, 0x10(sp)
move s1, v0
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s3
bnez s1, 0x4c3c
lw gp, 0x10(sp)
lw v0, 0x18(sp)
beqz v0, 0x4c74
lw t9, -sym.imp.g_strdup_printf(gp)
lw v1, 4(v0)
addiu v0, zero, 2
beq v1, v0, 0x4ce8
move a1, s4
lw a0, -sym.imp.g_variant_new_boolean(gp)
jalr t9
addiu a0, a0, 0xbc4
move s3, v0
lw gp, 0x10(sp)
lw v0, 0x18(sp)
move a1, s3
lw t9, -sym.imp.g_dbus_method_invocation_return_dbus_error(gp)
lw a2, 8(v0)
jalr t9
move a0, s0
lw gp, 0x10(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s3
lw gp, 0x10(sp)
--
jalr t9
move a0, s5
lw gp, 0x10(sp)
lw a0, 0x1c(sp)
lw v1, (s2)
bne a0, v1, 0x4d48
move v0, s1
lw ra, 0x3c(sp)
lw s6, 0x38(sp)
lw s5, 0x34(sp)
lw s4, 0x30(sp)
lw s3, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x40
lw a0, -sym.imp.g_variant_new_boolean(gp)
move a1, s4
jalr t9
addiu a0, a0, 0xbc4
lw gp, 0x10(sp)
move a1, s4
move a2, s6
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, 0xbd8
jalr t9
move s4, v0
lw gp, 0x10(sp)
move a2, v0
move a1, s4
lw t9, -sym.imp.g_dbus_method_invocation_return_dbus_error(gp)
move a0, s0
jalr t9
move s3, v0
lw gp, 0x10(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s4
lw gp, 0x10(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s3
b 0x4c3c
lw gp, 0x10(sp)
lw a0, -sym.imp.g_variant_new_boolean(gp)
jalr t9
addiu a0, a0, 0xb98
lw gp, 0x10(sp)
move a1, s4
move a2, s6
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, 0xba8
jalr t9
move s4, v0
lw gp, 0x10(sp)
move a2, v0
move a1, s4
lw t9, -sym.imp.g_dbus_method_invocation_return_dbus_error(gp)
move a0, s0
jalr t9
move s3, v0
lw gp, 0x10(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s4
b 0x4c1c
lw gp, 0x10(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
--
jalr t9
addiu a0, zero, 0xc
lw gp, 0x10(sp)
lw t9, -sym.get_channel_configuration(gp)
bal sym.get_channel_configuration
move s2, v0
lw gp, 0x10(sp)
move a0, v0
lw t9, -sym.get_nbr_of_channels(gp)
bal sym.get_nbr_of_channels
sw v0, 8(s2)
lw gp, 0x10(sp)
addiu a1, zero, 4
addiu a0, v0, 1
lw t9, -sym.imp.g_malloc0_n(gp)
jalr t9
move s3, v0
sw v0, (s2)
blez s3, 0x5538
lw gp, 0x10(sp)
lw s4, -sym.imp.g_variant_new_boolean(gp)
move s0, zero
b 0x5510
addiu s4, s4, 0xc64
lw v0, (s2)
lw t9, -sym.imp.g_strdup_printf(gp)
sll s1, s0, 2
addu s1, v0, s1
move a1, s0
jalr t9
move a0, s4
addiu s0, s0, 1
lw gp, 0x10(sp)
bne s3, s0, 0x550c
sw v0, (s1)
lw t9, -sym.imp.g_malloc0_n(gp)
addiu a1, zero, 0x20
jalr t9
move a0, s3
lw gp, 0x10(sp)
move a0, s2
lw t9, -0x7fc4(gp)
addiu t9, t9, 0x52c8
bal 0x52c8
sw v0, 4(s2)
lw ra, 0x2c(sp)
--
lw s1, 0x28(sp)
lw s0, 0x24(sp)
move v0, zero
jr ra
addiu sp, sp, 0x30
lw a3, -sym.imp.g_variant_new_boolean(gp)
lw a2, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_log(gp)
addiu a3, a3, 0xc60
b 0x59ac
addiu a2, a2, 0xcac
lui gp, 2
addiu gp, gp, 0x4678
addu gp, gp, t9
addiu sp, sp, -0x20
lw t9, -0x7fc4(gp)
sw ra, 0x1c(sp)
sw gp, 0x10(sp)
addiu t9, t9, 0x58ec
bal 0x58ec
nop
lw gp, 0x10(sp)
lw ra, 0x1c(sp)
move a1, v0
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, 0xcd4
jr t9
addiu sp, sp, 0x20
lui gp, 2
addiu gp, gp, 0x4630
addu gp, gp, t9
addiu sp, sp, -0x30
lw t9, -sym.imp.g_variant_n_children(gp)
sw gp, 0x10(sp)
sw s0, 0x24(sp)
sw ra, 0x2c(sp)
sw s1, 0x28(sp)
jalr t9
move s0, a0
beqz v0, 0x5adc
lw gp, 0x10(sp)
lw t9, -sym.imp.g_variant_get_child_value(gp)
move a1, zero
jalr t9
move a0, s0
--
addiu v1, v1, 0xd1c
lw t9, -sym.imp.g_log(gp)
sw v1, 0x10(sp)
addiu a3, v0, 0xc60
addiu a2, a2, 0xd6c
addiu a1, zero, 0x100
jalr t9
move a0, zero
b 0x6288
lw gp, 0x18(sp)
lui gp, 2
addiu gp, gp, 0x3c70
addu gp, gp, t9
addiu sp, sp, -0x28
sw gp, 0x10(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
move s1, a1
sw ra, 0x24(sp)
move s0, a0
beqz a3, 0x6488
move a1, a2
lw a2, -sym.imp.g_variant_new_boolean(gp)
addiu a2, a2, 0xd98
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xda0
lw gp, 0x10(sp)
move a1, s1
move a0, s0
lw t9, -sym.get_capture_mode_key(gp)
bal sym.get_capture_mode_key
move s0, v0
lw gp, 0x10(sp)
move a0, s0
lw t9, -0x7fc4(gp)
addiu t9, t9, 0x5ff0
bal 0x5ff0
move a1, v0
lw gp, 0x10(sp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
move a0, s0
lw t9, -sym.imp.g_free(gp)
lw s0, 0x1c(sp)
--
move a0, a1
move s0, a1
bal sym.get_channel_info
move s1, a2
lw gp, 0x20(sp)
lw t9, -sym.get_channel_source(gp)
bal sym.get_channel_source
move a0, v0
lw gp, 0x20(sp)
move a0, s0
lw t9, -sym.get_channel_index(gp)
bal sym.get_channel_index
move s5, v0
lw gp, 0x20(sp)
move a0, s0
sw zero, 0x38(sp)
lw t9, -sym.get_no_of_capture_modes(gp)
bal sym.get_no_of_capture_modes
move s6, v0
bltz s1, 0x6808
lw gp, 0x20(sp)
slt v1, s1, v0
bnez v1, 0x6898
lw t9, -sym.get_emulated(gp)
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a2, v0, -1
move a1, s1
jalr t9
addiu a0, a0, 0xe48
lw gp, 0x20(sp)
move a2, v0
move a0, s4
lw a1, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_dbus_method_invocation_return_dbus_error(gp)
addiu a1, a1, 0xe74
jalr t9
move s0, v0
lw gp, 0x20(sp)
move a0, s0
lw t9, -sym.imp.g_free(gp)
jalr t9
move s3, zero
lw gp, 0x20(sp)
lw a0, 0x3c(sp)
lw v1, (s2)
--
lw s0, 0x40(sp)
jr ra
addiu sp, sp, 0x68
bal sym.get_emulated
move a0, s0
move s3, v0
bnez v0, 0x69d0
lw gp, 0x20(sp)
lw t9, -sym.imp.g_bus_get_sync(gp)
addiu v0, sp, 0x38
sw v0, 0x28(sp)
move a2, v0
move a1, zero
jalr t9
addiu a0, zero, 1
move s7, v0
beqz v0, 0x69d8
lw gp, 0x20(sp)
lw t0, 4(s5)
lw s5, -obj.control_bus(gp)
sll v0, t0, 5
addu s5, s5, v0
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t1, (s5)
lw a2, 0x1c(s5)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a3, 0x18(s5)
lw a1, 4(s5)
sw t0, 0x34(sp)
sw t1, 0x30(sp)
addu a2, s6, a2
jalr t9
addiu a0, a0, 0xec4
lw a2, 8(s5)
lw t9, 0x10(s5)
move a1, s1
lw a3, 4(a2)
move a0, s0
sw a3, 0x2c(sp)
jalr t9
move fp, v0
lw gp, 0x20(sp)
lw t1, 0x30(sp)
lw v1, 0x28(sp)
lw s5, -sym.imp.g_variant_new_boolean(gp)
lw a3, 0x2c(sp)
--
sw ra, 0x64(sp)
sw s6, 0x60(sp)
sw s2, 0x50(sp)
sw s1, 0x4c(sp)
sw s0, 0x48(sp)
move s5, a1
sw v1, 0x44(sp)
beqz v0, 0x6c64
lw t9, -0x7f40(gp)
lw t9, -sym.imp.g_bus_get_sync(gp)
addiu s2, sp, 0x40
move a2, s2
move a1, zero
addiu a0, zero, 1
jalr t9
sw zero, 0x40(sp)
move s1, v0
beqz v0, 0x6cd4
lw gp, 0x38(sp)
lw v0, 4(s4)
lw s0, -obj.control_bus(gp)
sll v0, v0, 5
addu v0, s0, v0
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw a2, 0x1c(v0)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a3, 0x18(v0)
lw a1, 4(v0)
addu a2, s5, a2
addiu a0, a0, 0xec4
jalr t9
lw s5, (v0)
lw v1, 4(s4)
lw gp, 0x38(sp)
sll v1, v1, 5
addu s0, s0, v1
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw v1, 8(s0)
lw t9, -sym.imp.g_variant_new(gp)
addiu a0, a0, 0xf18
lw s6, 4(v1)
jalr t9
move s4, v0
lw gp, 0x38(sp)
move a1, s5
sw s2, 0x18(sp)
--
slt v0, a1, a0
sw s2, 0x50(sp)
sw ra, 0x64(sp)
sw s6, 0x60(sp)
sw s5, 0x5c(sp)
sw s3, 0x54(sp)
sw s1, 0x4c(sp)
move s2, a1
sw v1, 0x44(sp)
beqz v0, 0x70c8
lw t9, -0x7f40(gp)
lw t9, -sym.imp.g_bus_get_sync(gp)
addiu s3, sp, 0x40
move a2, s3
move a1, zero
addiu a0, zero, 1
jalr t9
sw zero, 0x40(sp)
move s1, v0
beqz v0, 0x7184
lw gp, 0x38(sp)
lw s0, 4(s0)
lw a0, -sym.imp.g_variant_new_boolean(gp)
sll v0, s0, 5
lw s0, -obj.control_bus(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addu s0, s0, v0
addiu a0, a0, 0xec4
lw a2, 0x1c(s0)
lw a3, 0x18(s0)
lw a1, 4(s0)
addu a2, s2, a2
jalr t9
lw s5, (s0)
lw gp, 0x38(sp)
lw v1, 8(s0)
move s6, v0
lw a2, -sym.imp.g_variant_new_boolean(gp)
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_variant_new(gp)
lw a1, 4(v1)
addiu a2, a2, 0xd58
jalr t9
addiu a0, a0, 0xe1c
lw gp, 0x38(sp)
move a1, s5
--
sw ra, 0x64(sp)
sw s6, 0x60(sp)
sw s4, 0x58(sp)
sw s1, 0x4c(sp)
sw s0, 0x48(sp)
move s5, a1
sw v1, 0x44(sp)
beqz v0, 0x739c
lw t9, -0x7f40(gp)
lw t9, -sym.imp.g_bus_get_sync(gp)
addiu s4, sp, 0x40
move a2, s4
move a1, zero
addiu a0, zero, 1
jalr t9
sw zero, 0x40(sp)
move s1, v0
beqz v0, 0x7458
lw gp, 0x38(sp)
lw v0, 4(s3)
lw s0, -obj.control_bus(gp)
sll v0, v0, 5
addu v0, s0, v0
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw a2, 0x1c(v0)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a3, 0x18(v0)
lw a1, 4(v0)
addu a2, s5, a2
addiu a0, a0, 0xec4
lw s5, (v0)
jalr t9
lw s6, 0xc(v0)
lw v1, 4(s3)
lw gp, 0x38(sp)
sll v1, v1, 5
addu s0, s0, v1
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw v1, 8(s0)
lw t9, -sym.imp.g_variant_new(gp)
move a2, s6
lw a1, 4(v1)
addiu a0, a0, 0xe1c
jalr t9
move s3, v0
lw gp, 0x38(sp)
--
b 0x8570
lw v0, 0x60(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, 0x19a4
addu gp, gp, t9
addiu sp, sp, -0x68
lw t9, -sym.imp.cli_resetOptions(gp)
sw s1, 0x5c(sp)
lw s1, -0x7d20(gp)
sw s0, 0x58(sp)
addiu s0, sp, 0x24
lw v0, (s1)
sw ra, 0x64(sp)
sw gp, 0x10(sp)
sw s2, 0x60(sp)
sw v0, 0x54(sp)
move s2, a0
jalr t9
move a0, s0
lw gp, 0x10(sp)
move a1, s2
lw a0, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0x1318
lw gp, 0x10(sp)
move a1, s0
move a0, v0
lw t9, -0x7fc4(gp)
addiu t9, t9, 0x7ac0
bal 0x7ac0
move s2, v0
lw gp, 0x10(sp)
move a0, s2
lw t9, -sym.imp.g_free(gp)
jalr t9
sw v0, 0x1c(sp)
lw a0, 0x54(sp)
lw v1, (s1)
lw gp, 0x10(sp)
bne a0, v1, 0x8774
lw v0, 0x1c(sp)
lw ra, 0x64(sp)
--
lw t9, -sym.imp.cli_cleanupGroupContext(gp)
jalr t9
move a0, v0
b 0x8850
lw gp, 0x10(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, 0x17c0
addu gp, gp, t9
addiu sp, sp, -0x50
addiu v0, sp, 0x38
sll a1, a1, 2
addu a1, v0, a1
lw v0, -sym.imp.g_variant_new_boolean(gp)
sw s2, 0x40(sp)
addiu v0, v0, 0x1318
lw s2, -0x7d20(gp)
sw v0, 0x28(sp)
lw v0, -sym.imp.g_variant_new_boolean(gp)
sw zero, 0x30(sp)
addiu v0, v0, 0x1384
sw v0, 0x2c(sp)
lw v0, (s2)
lw t9, -sym.imp.g_strdup_printf(gp)
sw s3, 0x44(sp)
move s3, a0
lw a0, -0x10(a1)
sw gp, 0x18(sp)
move a1, a2
sw ra, 0x4c(sp)
sw s4, 0x48(sp)
sw s1, 0x3c(sp)
sw s0, 0x38(sp)
sw v0, 0x34(sp)
jalr t9
addiu s4, sp, 0x24
lw gp, 0x18(sp)
move a2, s4
lw t9, -sym.imp.cli_getParamsInGroup(gp)
move a1, s3
move a0, v0
jalr t9
move s1, v0
lw v1, 0x24(sp)
--
lw gp, 0x18(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, 0x1660
addu gp, gp, t9
addiu sp, sp, -0x60
lw v0, (a0)
sw s2, 0x50(sp)
lw s2, -0x7d20(gp)
sw gp, 0x18(sp)
sw s4, 0x58(sp)
lw v1, (s2)
sw s0, 0x48(sp)
sw ra, 0x5c(sp)
sw s3, 0x54(sp)
sw s1, 0x4c(sp)
move s0, a0
move s4, a1
sw v1, 0x44(sp)
beqz v0, 0x8ac4
sw zero, 0x2c(sp)
addiu s3, sp, 0x2c
lw a2, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_snprintf(gp)
addiu s1, sp, 0x30
move a3, s4
addiu a2, a2, 0x1444
addiu a1, zero, 0x14
jalr t9
move a0, s1
lw gp, 0x18(sp)
lw a0, (s0)
move a3, s3
lw a2, -sym.imp.g_variant_new_boolean(gp)
lw t9, -sym.imp.g_key_file_get_string(gp)
addiu a2, a2, 0x1454
jalr t9
move a1, s1
beqz v0, 0x8b70
lw gp, 0x18(sp)
lw a0, 0x44(sp)
lw v1, (s2)
bne a0, v1, 0x8be0
lw ra, 0x5c(sp)
[*] Function printf used 15 times com.axis.CaptureMode1
