[*] Binary protection state of dptzd
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of dptzd
lw gp, 0x20(sp)
lw t9, -sym.imp.g_object_unref(gp)
jalr t9
move a0, fp
beqz s4, 0x44e4
lw gp, 0x20(sp)
lw t9, -sym.imp.g_variant_get_child_value(gp)
move a1, zero
jalr t9
move a0, s4
move s6, v0
beqz v0, 0x499c
lw gp, 0x20(sp)
lw t9, -sym.imp.g_key_file_new(gp)
jalr t9
nop
lw gp, 0x20(sp)
move a0, s6
lw t9, -sym.imp.g_variant_get_int32(gp)
jalr t9
move s7, v0
lw gp, 0x20(sp)
lw a1, 0x10(s0)
move s5, v0
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0x8dc
lw gp, 0x20(sp)
move a3, zero
move a2, zero
lw t9, -sym.imp.g_key_file_load_from_file(gp)
move a1, v0
move a0, s7
jalr t9
move fp, v0
lw gp, 0x20(sp)
addiu a2, s3, 0x854
move a3, zero
lw t9, -sym.imp.g_key_file_get_integer(gp)
move a1, a2
jalr t9
move a0, s7
beq s5, v0, 0x4af8
lw gp, 0x20(sp)
lw v0, (s0)
--
sw a0, 0x40(sp)
sw s6, 0x38(sp)
sw s4, 0x30(sp)
sw s3, 0x2c(sp)
move s5, a2
bal sym.ptz_driver_digital_get_type
move s0, a1
lw gp, 0x18(sp)
lw a0, 0x40(sp)
lw t9, -sym.imp.g_type_check_instance_cast(gp)
jalr t9
move a1, v0
lw gp, 0x18(sp)
addiu a0, zero, 0x2c
lw t9, -sym.imp.g_malloc0(gp)
jalr t9
move s1, v0
move s2, v0
lw gp, 0x18(sp)
beqz s0, 0x593c
sw v0, (s5)
lb v0, (s0)
bnez v0, 0x5b00
lw a1, -0x7fd0(gp)
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a2, 0x1bc(s1)
lw a1, 0x1b8(s1)
jalr t9
addiu a0, a0, 0x9ac
lw gp, 0x18(sp)
lw a2, 0x1c4(s1)
lw a1, 0x1c0(s1)
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, 0x9cc
sw v0, (s2)
jalr t9
lw s0, (s5)
lw v1, 0x1b8(s1)
lw a0, 0x1c0(s1)
lw gp, 0x18(sp)
slt v1, a0, v1
beqz v1, 0x5a90
sw v0, 4(s0)
lw v0, (s1)
lw t9, 0x20c(v0)
jalr t9
move a0, s1
move s6, v0
lw gp, 0x18(sp)
ori v0, zero, 0xffff
addu v0, s6, v0
sra v1, s6, 0x1f
sltu s2, v0, s6
addu s2, s2, v1
lw a0, -0x7fd0(gp)
srl v0, v0, 0x10
lw t9, -sym.imp.g_string_new(gp)
sll s2, s2, 0x10
or s2, s2, v0
jalr t9
addiu a0, a0, 0x9ec
slti v1, s2, 3
lw gp, 0x18(sp)
bnez v1, 0x5b5c
move s3, v0
lw s4, -0x7fd0(gp)
addiu s0, zero, 2
addiu s4, s4, 0xa08
lw v0, (s1)
sll a1, s0, 0x10
lw t9, 0x210(v0)
jalr t9
move a0, s1
lw gp, 0x18(sp)
move a3, s0
move a2, v0
lw t9, -sym.imp.g_string_append_printf(gp)
move a1, s4
move a0, s3
jalr t9
addiu s0, s0, 1
bne s2, s0, 0x59f4
lw gp, 0x18(sp)
lw t9, -0x7f70(gp)
bal 0xd850
move a0, s6
lw gp, 0x18(sp)
move a0, v0
lw v0, -0x7e3c(gp)
lw t9, -0x7f6c(gp)
bal 0xcfa0
lw a1, 0x40(v0)
lw gp, 0x18(sp)
lw t9, -0x7f64(gp)
bal 0xfd20
move a0, v0
lw gp, 0x18(sp)
sw v0, 0x10(sp)
sw v1, 0x14(sp)
lw a1, -0x7fd0(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
addiu a2, zero, 0x270f
addiu a1, a1, 0xa1c
jalr t9
move a0, s3
b 0x5aa8
lw gp, 0x18(sp)
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_string_new(gp)
jalr t9
addiu a0, a0, 0x9ec
lw gp, 0x18(sp)
move s3, v0
lw v0, (s5)
lw v1, (s3)
lw t9, -sym.imp.g_string_free(gp)
move a0, s3
sw v1, 8(v0)
jalr t9
move a1, zero
lw v1, (s5)
--
b 0x662c
addiu a2, s3, 0xb90
lw t9, -sym.imp.g_strdup(gp)
jalr t9
addiu a0, a0, 0x9a4
lw gp, 0x20(sp)
lw a0, 0x34(sp)
move s2, v0
lw t9, -0x7f70(gp)
bal 0xd850
addiu s4, zero, 1
lw gp, 0x20(sp)
move a0, v0
lw v0, -0x7e3c(gp)
lw t9, -0x7f6c(gp)
bal 0xcfa0
lw a1, 0x40(v0)
lw gp, 0x20(sp)
lw t9, -0x7f64(gp)
bal 0xfd20
move a0, v0
lw gp, 0x20(sp)
move a2, v0
move a3, v1
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xc1c
lw gp, 0x20(sp)
lw a0, (s0)
move a2, v0
lw t9, -sym.imp.g_hash_table_insert(gp)
jalr t9
move a1, s2
b 0x6640
lw gp, 0x20(sp)
lw t9, -sym.imp.g_strdup(gp)
jalr t9
addiu a0, a0, 0xc20
lw gp, 0x20(sp)
lw a0, 0x30(sp)
lw t9, -0x7f70(gp)
bal 0xd850
move s2, v0
lw gp, 0x20(sp)
move a0, v0
lw v0, -0x7e3c(gp)
lw t9, -0x7f6c(gp)
bal 0xcfa0
lw a1, 0x40(v0)
lw gp, 0x20(sp)
lw t9, -0x7f64(gp)
bal 0xfd20
move a0, v0
lw gp, 0x20(sp)
move a2, v0
move a3, v1
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xc1c
lw gp, 0x20(sp)
lw a0, (s0)
move a2, v0
lw t9, -sym.imp.g_hash_table_insert(gp)
jalr t9
move a1, s2
lw gp, 0x20(sp)
b 0x68b4
lw v0, 0x2c(s3)
lw t9, -sym.imp.g_strdup(gp)
jalr t9
addiu a0, a0, 0xc18
lw gp, 0x20(sp)
lw a0, 0x2c(sp)
lw t9, -0x7f70(gp)
bal 0xd850
move s2, v0
lw gp, 0x20(sp)
move a0, v0
lw v0, -0x7e3c(gp)
lw t9, -0x7f6c(gp)
bal 0xcfa0
lw a1, 0x40(v0)
lw gp, 0x20(sp)
lw t9, -0x7f64(gp)
bal 0xfd20
move a0, v0
lw gp, 0x20(sp)
move a2, v0
move a3, v1
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xc1c
lw gp, 0x20(sp)
lw a0, (s0)
move a2, v0
lw t9, -sym.imp.g_hash_table_insert(gp)
jalr t9
move a1, s2
lw gp, 0x20(sp)
b 0x6894
lw v0, 0x2c(s3)
beqz s2, 0x6b00
lw s0, -0x7fd0(gp)
lw t9, -0x7fd4(gp)
addiu t9, t9, 0x6500
bal 0x6500
nop
lw gp, 0x20(sp)
addiu a3, s0, 0xbe0
addiu a2, zero, 0x4a
--
jalr t9
move a1, s2
lw gp, 0x10(sp)
b 0x6c38
lw v0, 0x2c(s1)
lw t9, -sym.imp.g_strdup(gp)
jalr t9
addiu a0, a0, 0x9a4
lw gp, 0x10(sp)
lw a0, 0x288(s2)
lw t9, -0x7f00(gp)
bal 0xfba0
move s1, v0
lw gp, 0x10(sp)
move a0, v0
move a1, v1
lw v0, -0x7ddc(gp)
lw t9, -0x7f88(gp)
lw a2, 0x80(v0)
bal 0xec00
lw a3, 0x84(v0)
lw gp, 0x10(sp)
move a2, v0
move a3, v1
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xc1c
lw gp, 0x10(sp)
lw a0, (s0)
move a2, v0
lw t9, -sym.imp.g_hash_table_insert(gp)
jalr t9
move a1, s1
b 0x6c14
addiu v0, zero, 1
lw t9, -sym.imp.g_strdup(gp)
jalr t9
addiu a0, a0, 0xc20
lw gp, 0x10(sp)
lw a0, 0x284(s2)
lw t9, -0x7f00(gp)
bal 0xfba0
move s3, v0
lw gp, 0x10(sp)
move a0, v0
move a1, v1
lw v0, -0x7ddc(gp)
lw t9, -0x7f88(gp)
lw a2, 0x80(v0)
bal 0xec00
lw a3, 0x84(v0)
lw gp, 0x10(sp)
move a2, v0
move a3, v1
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xc1c
lw gp, 0x10(sp)
lw a0, (s0)
move a2, v0
lw t9, -sym.imp.g_hash_table_insert(gp)
jalr t9
move a1, s3
lw gp, 0x10(sp)
b 0x6c04
lw v0, 0x2c(s1)
lw t9, -sym.imp.g_strdup(gp)
jalr t9
addiu a0, a0, 0xc18
lw gp, 0x10(sp)
lw a0, 0x280(s2)
lw t9, -0x7f00(gp)
bal 0xfba0
move s3, v0
lw gp, 0x10(sp)
move a0, v0
move a1, v1
lw v0, -0x7ddc(gp)
lw t9, -0x7f88(gp)
lw a2, 0x80(v0)
bal 0xec00
lw a3, 0x84(v0)
lw gp, 0x10(sp)
move a2, v0
move a3, v1
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xc1c
lw gp, 0x10(sp)
lw a0, (s0)
move a2, v0
lw t9, -sym.imp.g_hash_table_insert(gp)
jalr t9
move a1, s3
lw gp, 0x10(sp)
b 0x6bf8
lw v0, 0x2c(s1)
lui gp, 2
addiu gp, gp, 0x32ac
addu gp, gp, t9
lw v0, -0x7df8(gp)
addiu sp, sp, -0x60
lw t9, -sym.ptz_driver_digital_param_get_limit_paramters(gp)
sw v0, 0x24(sp)
lw v0, (v0)
sw ra, 0x5c(sp)
--
sw v0, 0x2c(sp)
lw v0, -0x7fd0(gp)
addiu v0, v0, 0xc70
sw v0, 0x1c(sp)
lw v0, -0x7fd0(gp)
addiu v0, v0, 0xc6c
b 0x7014
sw v0, 0x20(sp)
lw v0, 0x28(sp)
lw t9, -sym.imp.g_strcmp0(gp)
lw a0, 4(s2)
jalr t9
addiu a1, v0, section..dynsym
beqz v0, 0x70ac
lw gp, 0x10(sp)
addiu s2, s2, 0x1c
lw v0, (s2)
beql v0, zero, 0x7120
lw v0, 0x2c(s5)
lw t9, -sym.imp.g_strcmp0(gp)
lw a0, 4(s2)
jalr t9
lw a1, 0x2c(sp)
bnez v0, 0x6fe8
lw gp, 0x10(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a0, 0x1c(sp)
jalr t9
move a1, s7
lw gp, 0x10(sp)
move a0, s1
move a1, v0
lw t9, -sym.imp.g_list_prepend(gp)
jalr t9
sw v0, 0xc(s2)
lw gp, 0x10(sp)
lw a0, 0x20(sp)
move a2, s4
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s7
jalr t9
move s1, v0
lw gp, 0x10(sp)
move a0, s1
move a1, v0
lw t9, -sym.imp.g_list_prepend(gp)
jalr t9
sw v0, 0x18(s2)
lw gp, 0x10(sp)
move s1, v0
lw v0, 0x28(sp)
lw a0, 4(s2)
lw t9, -sym.imp.g_strcmp0(gp)
jalr t9
addiu a1, v0, section..dynsym
bnez v0, 0x7004
lw gp, 0x10(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a0, 0x1c(sp)
jalr t9
move a1, s4
lw gp, 0x10(sp)
move a0, s1
sw v0, 0xc(s2)
lw t9, -sym.imp.g_list_prepend(gp)
jalr t9
move a1, v0
lw gp, 0x10(sp)
lw a0, 0x20(sp)
move a2, s4
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s7
jalr t9
move s1, v0
lw gp, 0x10(sp)
sw v0, 0x18(s2)
move a0, s1
lw t9, -sym.imp.g_list_prepend(gp)
move a1, v0
jalr t9
addiu s2, s2, 0x1c
move s1, v0
lw v0, (s2)
bnez v0, 0x7014
lw gp, 0x10(sp)
lw v0, 0x2c(s5)
andi v0, v0, 0x38
beqz v0, 0x713c
lw a1, -0x7fd0(gp)
lw v0, (s0)
bnez v0, 0x71c0
--
lw v0, -0x7fd0(gp)
lw s4, -0x7fd0(gp)
lw s2, -0x7fd0(gp)
addiu v0, v0, 0xaec
lw s7, -0x7fd0(gp)
sw v0, 0x1c(sp)
addiu s4, s4, 0xc70
b 0x7208
addiu s2, s2, 0xc6c
lw t9, -sym.imp.g_strcmp0(gp)
lw a0, 4(s0)
jalr t9
addiu a1, s7, 0xb10
beqz v0, 0x729c
lw gp, 0x10(sp)
addiu s0, s0, 0x1c
lw v0, (s0)
beqz v0, 0x713c
lw a1, -0x7fd0(gp)
lw t9, -sym.imp.g_strcmp0(gp)
lw a0, 4(s0)
jalr t9
lw a1, 0x1c(sp)
bnez v0, 0x71e0
lw gp, 0x10(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s6
jalr t9
move a0, s4
lw gp, 0x10(sp)
move a0, s1
move a1, v0
lw t9, -sym.imp.g_list_prepend(gp)
jalr t9
sw v0, 0xc(s0)
lw gp, 0x10(sp)
move a2, s3
move a1, s6
lw t9, -sym.imp.g_strdup_printf(gp)
move a0, s2
jalr t9
move s1, v0
lw gp, 0x10(sp)
move a0, s1
move a1, v0
lw t9, -sym.imp.g_list_prepend(gp)
jalr t9
sw v0, 0x18(s0)
lw gp, 0x10(sp)
lw a0, 4(s0)
addiu a1, s7, 0xb10
lw t9, -sym.imp.g_strcmp0(gp)
jalr t9
move s1, v0
bnez v0, 0x71f8
lw gp, 0x10(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s3
jalr t9
move a0, s4
lw gp, 0x10(sp)
move a0, s1
move a1, v0
lw t9, -sym.imp.g_list_prepend(gp)
jalr t9
sw v0, 0xc(s0)
lw gp, 0x10(sp)
move a2, s3
move a1, s6
lw t9, -sym.imp.g_strdup_printf(gp)
move a0, s2
jalr t9
move s1, v0
lw gp, 0x10(sp)
move a0, s1
sw v0, 0x18(s0)
lw t9, -sym.imp.g_list_prepend(gp)
jalr t9
move a1, v0
move s1, v0
b 0x71f8
lw gp, 0x10(sp)
lw a1, -0x7fd0(gp)
lw a2, 0x30(sp)
lw t9, 0x154(fp)
addiu a1, a1, 0xc74
jalr t9
move a0, s5
lw gp, 0x10(sp)
lw t9, -0x7d1c(gp)
--
move a0, s0
lw t9, -sym.imp.g_type_check_instance_cast(gp)
jalr t9
move a1, v0
lw a0, 0x2a8(s0)
beqz a0, 0xa668
lw gp, 0x10(sp)
lw a2, -0x7fd0(gp)
lw a1, -0x7fd0(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
lw t9, -sym.imp.g_key_file_get_integer(gp)
move a3, zero
addiu a2, a2, 0xf18
addiu a1, a1, 0xf28
jr t9
addiu sp, sp, 0x28
lw t9, -sym.imp.g_key_file_new(gp)
jalr t9
move s1, v0
lw gp, 0x10(sp)
lw a1, 0x10(s1)
sw v0, 0x2a8(s0)
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xeec
lw gp, 0x10(sp)
lw a0, 0x2a8(s0)
move a3, zero
lw t9, -sym.imp.g_key_file_load_from_file(gp)
move a2, zero
move a1, v0
jalr t9
move s1, v0
lw gp, 0x10(sp)
lw t9, -0x7d1c(gp)
jalr t9
move a0, s1
lw gp, 0x10(sp)
lw a0, 0x2a8(s0)
lw ra, 0x24(sp)
lw a2, -0x7fd0(gp)
lw a1, -0x7fd0(gp)
lw s1, 0x20(sp)
--
bal 0xa5f0
move s2, a1
beq v0, s2, 0xacf8
lw gp, 0x18(sp)
lw a2, -0x7fd0(gp)
lw a1, -0x7fd0(gp)
lw t9, -sym.imp.g_key_file_set_integer(gp)
lw a0, 0x2a8(s1)
move a3, s2
addiu a2, a2, 0xf18
addiu a1, a1, 0xf28
jalr t9
sw s2, 0x2a4(s1)
lw gp, 0x18(sp)
lw t9, -sym.imp.ptz_driver_get_type(gp)
jalr t9
sw zero, 0x24(sp)
lw gp, 0x18(sp)
move a1, v0
lw t9, -sym.imp.g_type_check_instance_cast(gp)
jalr t9
move a0, s1
lw gp, 0x18(sp)
lw a1, 0x10(v0)
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0xeec
lw gp, 0x18(sp)
lw a0, 0x2a8(s1)
move a2, zero
lw t9, -sym.imp.g_key_file_to_data(gp)
addiu a1, sp, 0x28
sw zero, 0x28(sp)
jalr t9
move s3, v0
move s2, v0
beqz v0, 0xae8c
lw gp, 0x18(sp)
lw t9, -sym.imp.confutils_set_file_contents_with_sync(gp)
lw a2, 0x28(sp)
addiu a3, sp, 0x24
move a1, v0
jalr t9
move a0, s3
bnez v0, 0xae10
--
jalr t9
nop
lw gp, 0x10(sp)
lw a0, 0x294(s0)
b 0xb9c0
sw zero, 0x2a0(s0)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x28
jalr t9
lw a0, 0x240(s0)
lw gp, 0x10(sp)
b 0xb9b4
sw zero, 0x248(s0)
b 0xb9d8
sw zero, 0x2a0(s0)
nop
nop
lui gp, 2
addiu gp, gp, -0x1910
addu gp, gp, t9
addiu sp, sp, -0x28
addiu a2, a0, -1
lw a1, -0x7fd0(gp)
lw a0, -0x7fd0(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a1, a1, 0x1380
sw ra, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x10(sp)
jalr t9
addiu a0, a0, 0x138c
lw gp, 0x10(sp)
addiu a1, zero, 2
move a0, v0
lw t9, -sym.imp.open(gp)
jalr t9
move s0, v0
lw gp, 0x10(sp)
sw v0, 0x1c(sp)
lw t9, -0x7d1c(gp)
jalr t9
move a0, s0
lw ra, 0x24(sp)
lw v0, 0x1c(sp)
lw s0, 0x20(sp)
[*] Function printf used 22 times dptzd
