[*] Binary protection state of presettourd
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of presettourd
addiu t9, t9, 0x2c98
b 0x2c98
nop
nop
lui gp, 2
addiu gp, gp, 0x2ba0
addu gp, gp, t9
lw v0, (a0)
sltiu v1, v0, 0xb
beqz v1, 0x2fc4
nop
sll a2, v0, 2
lw v0, -0x7fd8(gp)
addiu sp, sp, -0x28
addiu v0, v0, -0x46c0
sw gp, 0x18(sp)
lwx v0, a2(v0)
sw ra, 0x24(sp)
addu v0, v0, gp
jr v0
move t0, a1
lw a3, 0x10c(a0)
bltz a3, 0x2f9c
lw v0, -0x7fd8(gp)
lw v0, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
addiu v0, v0, -0x492c
lw a1, -0x7fd8(gp)
sw v0, 0x10(sp)
addiu a1, a1, -0x49c4
jalr t9
move a0, t0
move v0, zero
lw ra, 0x24(sp)
jr ra
addiu sp, sp, 0x28
lw a3, 0x10c(a0)
bltzl a3, 0x2f74
lw v0, -0x7fd8(gp)
lw v0, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2dd0
addiu v0, v0, -sym.preset_validation_set_status
lw a3, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
addiu a3, a3, -0x49fc
lw a1, -0x7fd8(gp)
move a0, t0
jalr t9
addiu a1, a1, -0x49f4
lw ra, 0x24(sp)
move v0, zero
jr ra
addiu sp, sp, 0x28
lw a3, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2e24
addiu a3, a3, -0x49dc
lw a3, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2e24
addiu a3, a3, -0x49d4
lw a3, 0x10c(a0)
bltzl a3, 0x2f4c
lw v0, -0x7fd8(gp)
lw v0, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2dd0
addiu v0, v0, -0x49a4
lw a3, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2e24
addiu a3, a3, -0x4964
lw a3, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2e24
addiu a3, a3, -0x495c
lw a3, 0x10c(a0)
bltzl a3, 0x2f24
lw v0, -0x7fd8(gp)
lw v0, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2dd0
addiu v0, v0, -0x4944
lw a3, 0x10c(a0)
bltzl a3, 0x2efc
lw v0, -0x7fd8(gp)
lw v0, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0x108(a0)
b 0x2dd0
addiu v0, v0, -0x4938
b 0x2de8
addiu v0, zero, -1
lw a3, -0x7fd8(gp)
lw a1, -0x7fd8(gp)
addiu v0, v0, -0x4980
lw t9, -sym.imp.g_assertion_message_expr(gp)
sw v0, 0x10(sp)
addiu a3, a3, -0x4564
addiu a2, zero, 0x94
addiu a1, a1, -0x4990
jalr t9
move a0, zero
lw a3, -0x7fd8(gp)
lw a1, -0x7fd8(gp)
addiu v0, v0, -0x4980
lw t9, -sym.imp.g_assertion_message_expr(gp)
sw v0, 0x10(sp)
--
lw v0, (s3)
addiu v1, zero, -1
bne v0, v1, 0x34c0
lw t9, -sym.imp.__isoc99_sscanf(gp)
lw a0, 0xc(s0)
lw a1, 0x20(sp)
jalr t9
move a2, s3
lw gp, 0x18(sp)
beqz fp, 0x3458
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, fp
lw gp, 0x18(sp)
lw t9, -sym.imp.cli_getChildGroupInGroup(gp)
move a2, s2
move a1, s1
jalr t9
move a0, s0
lw v0, 0x28(sp)
bnez v0, 0x34f8
lw gp, 0x18(sp)
lw v0, 0x14(s0)
bnez v0, 0x34fc
lw t9, -sym.imp.cli_cleanupGroupContext(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0xc(s0)
move a1, s5
jalr t9
move a0, s7
lw gp, 0x18(sp)
move a0, s7
move a2, s2
lw t9, -sym.imp.cli_getCustomParam(gp)
jalr t9
move a1, s1
lw a0, 0x28(sp)
lw gp, 0x18(sp)
beqz a0, 0x3408
move fp, v0
beqz fp, 0x34d4
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, fp
lw gp, 0x18(sp)
addiu v0, zero, -1
--
lw t9, -sym.imp.cli_cleanupGroupContext(gp)
jalr t9
move a0, s6
lw gp, 0x18(sp)
addiu a0, s5, 2
lw t9, -sym.imp.g_malloc0(gp)
jalr t9
sll a0, a0, 2
lw gp, 0x18(sp)
addiu a0, fp, -0x48e8
sw v0, (s4)
lw t9, -sym.imp.cli_getChildGroupsInGroup(gp)
move a2, s2
jalr t9
move a1, s1
lw a0, 0x30(sp)
lw gp, 0x18(sp)
bnez a0, 0x36c0
move s6, v0
lw s5, -0x7fd8(gp)
addiu s7, sp, 0x64
b 0x384c
addiu s5, s5, -0x48d8
lw v0, 0x14(s6)
bnez v0, 0x386c
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 0xc(s6)
move a1, s5
jalr t9
move a0, s7
lw gp, 0x18(sp)
lw v0, (s4)
move a0, s7
lw t9, -sym.imp.cli_getCustomParam(gp)
sll fp, s0, 2
move a2, s2
move a1, s1
jalr t9
addu fp, v0, fp
lw a0, 0x30(sp)
lw gp, 0x18(sp)
bnez a0, 0x38d0
sw v0, (fp)
addiu s0, s0, 1
beq s0, s3, 0x36c4
lw t9, -sym.imp.cli_cleanupGroupContext(gp)
--
addiu a2, a2, -0x48a8
jalr t9
sw zero, (s4)
b 0x36d0
lw gp, 0x18(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, 0x1ff8
addu gp, gp, t9
addiu sp, sp, -0x170
sw s3, 0x164(sp)
lw s3, -0x7e0c(gp)
sw gp, 0x18(sp)
sw ra, 0x16c(sp)
lw v0, (s3)
sw s4, 0x168(sp)
sw s2, 0x160(sp)
sw s1, 0x15c(sp)
sw s0, 0x158(sp)
sw zero, 0x20(sp)
sw v0, 0x154(sp)
bltz a0, 0x3a18
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
addiu s1, sp, 0x54
move a2, a0
addiu a1, a1, -0x48d0
lw s4, -0x7fdc(gp)
jalr t9
move a0, s1
lw gp, 0x18(sp)
addiu a0, s4, -0x23e0
addiu s0, sp, 0x24
lw t9, -sym.imp.g_mutex_lock(gp)
jalr t9
addiu s2, sp, 0x20
lw gp, 0x18(sp)
lw t9, -sym.imp.cli_resetOptions(gp)
jalr t9
move a0, s0
lw gp, 0x18(sp)
move a0, s0
lw t9, -sym.imp.cli_sync(gp)
jalr t9
--
addiu s5, sp, 0x54
move a1, s5
lw t9, -0x7fc8(gp)
addiu t9, t9, 0x2d70
bal 0x2d70
move a0, s0
bnez v0, 0x3e64
lw gp, 0x18(sp)
lw t9, -sym.imp.cli_resetOptions(gp)
addiu s1, sp, 0x24
jalr t9
move a0, s1
lw gp, 0x18(sp)
addiu s2, sp, 0x20
move a1, s2
lw t9, -sym.imp.cli_sync(gp)
jalr t9
move a0, s1
lw v0, (s0)
lw gp, 0x18(sp)
beqz v0, 0x3e08
addiu s6, s0, 8
sltiu v0, v0, 5
bnez v0, 0x3d88
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
lw a2, 4(s0)
addiu a1, a1, -0x48c0
jalr t9
move a0, s6
lw gp, 0x18(sp)
lw t9, -sym.imp.cli_setCustomParam(gp)
move a3, s2
move a2, s1
move a1, s6
jalr t9
move a0, s5
lw s0, 0x20(sp)
bnez s0, 0x3e9c
lw gp, 0x18(sp)
lw t9, -sym.imp.cli_sync(gp)
move a1, s2
jalr t9
move a0, s1
lw gp, 0x18(sp)
lw t9, -sym.imp.g_mutex_unlock(gp)
--
addiu t9, t9, 0x3918
b 0x3918
nop
lui gp, 2
addiu gp, gp, 0x17fc
addu gp, gp, t9
lw t9, -0x7fc8(gp)
addiu t9, t9, 0x35b8
b 0x35b8
nop
lui gp, 2
addiu gp, gp, 0x17e0
addu gp, gp, t9
move a2, a0
lw a1, -0x7fd8(gp)
lw a0, -0x7fd8(gp)
lw t9, -0x7fc8(gp)
addiu a1, a1, -0x4760
addiu t9, t9, 0x2fcc
b 0x2fcc
addiu a0, a0, -0x48e8
lui gp, 2
addiu gp, gp, 0x17b4
addu gp, gp, t9
addiu sp, sp, -0x130
lw t9, -sym.imp.g_sprintf(gp)
sw s1, 0x124(sp)
lw s1, -0x7e0c(gp)
sw s2, 0x128(sp)
move s2, a1
lw v0, (s1)
lw a1, -0x7fd8(gp)
sw s0, 0x120(sp)
addiu s0, sp, 0x1c
sw gp, 0x10(sp)
move a2, a0
sw ra, 0x12c(sp)
move a0, s0
addiu a1, a1, -0x475c
sw v0, 0x11c(sp)
jalr t9
nop
lw gp, 0x10(sp)
move a0, s0
move a2, s2
lw a1, -0x7fd8(gp)
--
jalr t9
move a0, zero
lw v0, (a1)
bltz v0, 0x4430
lw t9, -sym.imp.g_mutex_lock(gp)
lw s5, -0x7fdc(gp)
jalr t9
addiu a0, s5, -0x23e0
lw gp, 0x18(sp)
addiu s4, sp, 0x24
lw t9, -sym.imp.cli_resetOptions(gp)
jalr t9
move a0, s4
lw v0, (s0)
lw gp, 0x18(sp)
sw v0, 0x2c(sp)
lw t9, -sym.imp.cli_sync(gp)
addiu s2, sp, 0x20
move a1, s2
jalr t9
move a0, s4
lw gp, 0x18(sp)
move a2, s1
addiu s1, sp, 0x54
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
move a0, s1
jalr t9
addiu a1, a1, -0x475c
lw gp, 0x18(sp)
move a0, s1
move a3, s2
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.cli_createDynamicGroup(gp)
move a2, s4
jalr t9
addiu a1, a1, -0x3c0c
lw s1, 0x20(sp)
bnez s1, 0x445c
lw gp, 0x18(sp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.__isoc99_sscanf(gp)
move a2, s0
addiu a1, a1, -0x46f4
jalr t9
move a0, v0
--
sw v0, 0x154(sp)
bltzl a0, 0x45a0
lw v0, -0x7fd8(gp)
bltz a1, 0x45c8
move s4, a1
lw s5, -0x7fdc(gp)
lw t9, -sym.imp.g_mutex_lock(gp)
move s1, a0
jalr t9
addiu a0, s5, -0x23e0
lw gp, 0x18(sp)
addiu s0, sp, 0x24
move a0, s0
lw t9, -sym.imp.cli_resetOptions(gp)
jalr t9
addiu s2, sp, 0x20
lw gp, 0x18(sp)
move a0, s0
lw t9, -sym.imp.cli_sync(gp)
jalr t9
move a1, s2
lw gp, 0x18(sp)
move a2, s1
addiu s1, sp, 0x54
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
move a3, s4
addiu a1, a1, -0x470c
jalr t9
move a0, s1
lw gp, 0x18(sp)
move a1, s0
move a0, s1
lw t9, -sym.imp.cli_deleteGroup(gp)
jalr t9
move a2, s2
lw gp, 0x18(sp)
lw s0, 0x20(sp)
addiu a0, s5, -0x23e0
bnez s0, 0x45f4
lw t9, -sym.imp.g_mutex_unlock(gp)
jalr t9
nop
lw a0, 0x154(sp)
lw v1, (s3)
lw gp, 0x18(sp)
--
sw s3, 0x54(sp)
sw s2, 0x50(sp)
move s0, a0
sw v1, 0x44(sp)
bltz v0, 0x4d00
lw v1, -0x7fdc(gp)
lw v1, -0x23c4(v1)
slt v1, v0, v1
beqz v1, 0x4d04
lw a3, -0x7fd8(gp)
lw v1, -0x7fdc(gp)
sll v0, v0, 2
lw s2, -0x23cc(v1)
addu s2, s2, v0
lw a0, (s2)
beqz a0, 0x4da8
lw t9, -sym.imp.g_hash_table_remove_all(gp)
jalr t9
nop
lw gp, 0x30(sp)
lw s2, -0x7fdc(gp)
lw v0, -0x23c8(s2)
beqz v0, 0x4d60
lw a1, -0x7fd8(gp)
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a2, s0
addiu a1, a1, -0x44f4
addiu a0, a0, -0x44dc
sw zero, 0x3c(sp)
jalr t9
sw zero, 0x40(sp)
lw gp, 0x30(sp)
move a2, v0
move s3, v0
addiu v0, zero, -1
sw v0, 0x20(sp)
lw v0, -0x7fd8(gp)
lw a3, -0x7fd8(gp)
lw a1, -0x7fd8(gp)
lw a0, -0x23c8(s2)
lw t9, -sym.imp.g_dbus_connection_call_sync(gp)
addiu v0, v0, -0x44ac
addiu s4, sp, 0x40
addiu a3, a3, -0x44d4
addiu a1, a1, -0x44bc
--
sw fp, 0x60(sp)
sw s7, 0x5c(sp)
sw s5, 0x54(sp)
sw s4, 0x50(sp)
sw s3, 0x4c(sp)
sw s2, 0x48(sp)
sw s1, 0x44(sp)
sw s0, 0x40(sp)
blez v0, 0x5178
lw v0, -0x7fdc(gp)
lw s5, -0x7fd8(gp)
sw v0, 0x30(sp)
lw v0, -0x7fd8(gp)
lw s4, -0x7fd8(gp)
lw s3, -0x7fd8(gp)
addiu v0, v0, -0x44bc
lw fp, -0x7fdc(gp)
sw a1, 0x3c(sp)
sw a0, 0x38(sp)
move s0, zero
move s1, zero
addiu s5, s5, -0x44f4
addiu s4, s4, -0x44dc
addiu s3, s3, -0x4440
sw v0, 0x34(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu s1, s1, 1
move a2, s1
move a1, s5
jalr t9
move a0, s4
move s2, v0
lw v0, 0x30(sp)
lw gp, 0x28(sp)
lw t0, -0x23d0(fp)
lw a0, -0x23c8(v0)
lw v0, 0x3c(sp)
lw a2, 0x34(sp)
sw v0, 0x20(sp)
lw v0, 0x38(sp)
lw t9, -sym.imp.g_dbus_connection_signal_subscribe(gp)
move a3, s3
move a1, zero
sw zero, 0x24(sp)
sw v0, 0x1c(sp)
sw zero, 0x18(sp)
--
nop
lui gp, 2
addiu gp, gp, -0x13dc
addu gp, gp, t9
addiu sp, sp, -0x28
lw t9, -sym.imp.g_malloc(gp)
sw gp, 0x10(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw ra, 0x24(sp)
sw s0, 0x18(sp)
move s2, a0
addiu a0, zero, 0x110
jalr t9
move s1, a1
beqz v0, 0x6d98
lw gp, 0x10(sp)
move s0, v0
sw s2, 0x108(v0)
sw zero, (v0)
bnez s1, 0x6d8c
addiu a0, v0, 8
lw a2, -0x7fd8(gp)
addiu a2, a2, -0x40e4
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_sprintf(gp)
jalr t9
addiu a1, a1, -0x49a8
lw gp, 0x10(sp)
lw ra, 0x24(sp)
lw s2, 0x20(sp)
lw a1, -0x7fc8(gp)
lw a0, -0x7fd8(gp)
lw s1, 0x1c(sp)
move a2, s0
lw t9, -sym.imp.g_thread_new(gp)
lw s0, 0x18(sp)
addiu a1, a1, 0x55cc
addiu a0, a0, -0x40e0
jr t9
addiu sp, sp, 0x28
lw a2, -0x7fd8(gp)
b 0x6d48
addiu a2, a2, -0x428c
lw ra, 0x24(sp)
lw s2, 0x20(sp)
--
lw t9, -sym.imp.g_type_check_instance_is_a(gp)
move a1, v0
jalr t9
move a0, s0
bnez v0, 0x6fe8
lw gp, 0x20(sp)
lw v0, -0x7fd8(gp)
lw a3, -0x7fd8(gp)
lw a1, -0x7fd8(gp)
addiu v0, v0, -0x4334
lw t9, -sym.imp.g_assertion_message_expr(gp)
sw v0, 0x10(sp)
addiu a3, a3, -0x3ebc
addiu a2, zero, 0x27c
addiu a1, a1, -0x436c
jalr t9
move a0, zero
lw a0, 0x20(s0)
beqz a0, 0x7000
lw t9, -sym.imp.g_object_unref(gp)
jalr t9
nop
lw gp, 0x20(sp)
lw s3, -0x7fd8(gp)
lw s6, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a1, s3, -0x40c8
jalr t9
addiu a0, s6, -0x40bc
lw gp, 0x20(sp)
move a2, s2
addiu a1, s3, -0x40c8
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, -0x40ac
jalr t9
move s5, v0
lw gp, 0x20(sp)
addiu a1, s3, -0x40c8
addiu a0, s6, -0x40bc
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
move s3, v0
lw gp, 0x20(sp)
lw a0, 0x1c(s0)
move s2, v0
lw t9, -sym.imp.g_dbus_proxy_new_sync(gp)
addiu v0, sp, 0x2c
sw v0, 0x1c(sp)
sw zero, 0x18(sp)
sw s2, 0x14(sp)
sw s3, 0x10(sp)
move a3, s5
move a2, zero
addiu a1, zero, 1
jalr t9
sw zero, 0x2c(sp)
lw a0, 0x2c(sp)
lw gp, 0x20(sp)
beqz a0, 0x70a8
sw v0, 0x20(s0)
[*] Function printf used 23 times presettourd
