[*] Binary protection state of stclient

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of stclient

lw gp, 0x18(sp)
lw t9, -sym.utils_read_serial_number(gp)
bal sym.utils_read_serial_number
sw v0, 0x20(sp)
lw gp, 0x18(sp)
lw t9, -sym.utils_read_api_version(gp)
bal sym.utils_read_api_version
sw v0, 0x2c(sp)
lw gp, 0x18(sp)
lw t9, -sym.utils_read_product_name(gp)
bal sym.utils_read_product_name
move s5, v0
lw gp, 0x18(sp)
lw t9, -sym.utils_read_firmware_version(gp)
bal sym.utils_read_firmware_version
sw v0, 0x24(sp)
lw gp, 0x18(sp)
lw t9, -sym.ssl_get_connections(gp)
bal sym.ssl_get_connections
move s6, v0
lw gp, 0x18(sp)
addiu v0, v0, -1
sw v0, 0x28(sp)
lw a0, -0x7f44(gp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
lw a2, -0x3ff0(a0)
addiu a1, a1, 0x7600
jalr t9
move a0, s3
lw v1, 0x2c(sp)
beqz v1, 0x8b44
lw gp, 0x18(sp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
move a2, v1
addiu a1, a1, 0x760c
jalr t9
move a0, s3
lw gp, 0x18(sp)
lw t9, -sym.remote_service_is_locked(gp)
bal sym.remote_service_is_locked
nop
bnez v0, 0x8f0c
lw gp, 0x18(sp)
lw a2, -0x7fd8(gp)
addiu a2, a2, 0x7470
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
addiu a1, a1, 0x7618
jalr t9
move a0, s3
lw gp, 0x18(sp)
move a0, s3
lw a2, -0x7fd8(gp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
addiu a2, a2, 0x7624
jalr t9
addiu a1, a1, 0x7628
lw a2, 0x20(sp)
beqz a2, 0x8bb8
lw gp, 0x18(sp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
addiu a1, a1, 0x7634
jalr t9
move a0, s3
lw gp, 0x18(sp)
lw a2, 0x24(sp)
beqz a2, 0x8bd8
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
addiu a1, a1, 0x7644
jalr t9
move a0, s3
lw gp, 0x18(sp)
beqz s6, 0x8bf8
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
move a2, s6
addiu a1, a1, 0x7650
jalr t9
move a0, s3
lw gp, 0x18(sp)
beqz s5, 0x8c18
lw t9, -sym.imp.g_string_append_printf(gp)
lw a1, -0x7fd8(gp)
move a2, s5
addiu a1, a1, 0x7664
jalr t9
move a0, s3
lw gp, 0x18(sp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
lw a2, 0x28(sp)
addiu a1, a1, 0x766c
jalr t9
move a0, s3
lw gp, 0x18(sp)
move a0, s3
lw a2, -0x7fd8(gp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
addiu a2, a2, 0x767c
jalr t9
addiu a1, a1, 0x7690
lw v0, -0x3724(fp)
beqz v0, 0x8f18
lw gp, 0x18(sp)
lw t9, -sym.psk_create(gp)
bal sym.psk_create
nop
move s6, v0
beqz v0, 0x8fb0
lw gp, 0x18(sp)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
move a2, v0
addiu a1, a1, 0x76a4
jalr t9
move a0, s3
lw gp, 0x18(sp)
lw a1, -0x7fd8(gp)
lw t9, -sym.session_new(gp)
lw a3, (s3)
move a2, zero
addiu a1, a1, 0x76a8
bal sym.session_new
move a0, s2
move s5, v0
beqz v0, 0x8fb4
lw gp, 0x18(sp)
lw t9, -sym.session_set_common_options(gp)
bal sym.session_set_common_options
move a0, v0
lw gp, 0x18(sp)
addiu a2, sp, 0x38
--
lw gp, 0x18(sp)
lw v0, -sym.command_channel_set_established(gp)
lw t9, -sym.imp.g_main_loop_get_context(gp)
lw s1, 0x34(sp)
jalr t9
lw a0, (v0)
lw gp, 0x18(sp)
move a2, v0
move a0, s1
lw a1, -0x7f3c(gp)
lw t9, -sym.socket_new(gp)
bal sym.socket_new
addiu a1, a1, 0x7a28
lw v1, -0x3724(fp)
lw gp, 0x18(sp)
beqz v1, 0x9040
sw v0, 0x10(s5)
lw t9, -sym.ssl_create_dispatcher_client_instance(gp)
lw a1, 0x14(s5)
jalr t9
lw a0, 0x34(sp)
lw gp, 0x18(sp)
lw a2, 0x14(s5)
lw a1, 0x18(s5)
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, 0x76dc
jalr t9
sw v0, 0xc(s5)
lw gp, 0x18(sp)
move a0, v0
lw t9, -sym.imp.strlen(gp)
jalr t9
move s1, v0
lw gp, 0x18(sp)
lw a0, 0x24(s5)
move a2, v0
lw t9, -sym.imp.g_byte_array_append(gp)
jalr t9
move a1, s1
addiu v0, zero, 1
lw gp, 0x18(sp)
sw v0, 0x1c(s5)
lw t9, -sym.status_led_set(gp)
bal sym.status_led_set
lw a0, 0x38(sp)
--
move v0, s0
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
jr ra
addiu sp, sp, 0x28
addiu a1, zero, 0x2714
jalr t9
move a0, s1
bnez v0, 0x9dcc
lw gp, 0x10(sp)
lw v0, -0x36ec(s0)
lw a2, 0xc(v0)
bgtz a2, 0x9db0
lw t9, -sym.imp.curl_easy_setopt(gp)
lw a1, 0x14(v0)
beqz a1, 0x9c54
move s2, zero
lb v1, (a1)
beqz v1, 0x9c58
lw t9, -sym.imp.curl_easy_setopt(gp)
lw a2, 0x18(v0)
beql a2, zero, 0x9e10
lw a2, -0x7fd8(gp)
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, 0x77d4
lw gp, 0x10(sp)
move a2, v0
addiu a1, zero, 0x2716
lw t9, -sym.imp.curl_easy_setopt(gp)
move a0, s1
jalr t9
move s2, v0
bnez v0, 0x9dfc
lw gp, 0x10(sp)
lw v0, -0x36ec(s0)
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_strcasecmp(gp)
lw a0, 0x1c(v0)
jalr t9
addiu a1, a1, 0x77f8
bnez v0, 0x9e2c
lw gp, 0x10(sp)
addiu a2, zero, 1
--
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.g_strcmp0(gp)
jalr t9
addiu a1, a1, -0x7cc0
beqz v0, 0xd868
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_by_id(gp)
jalr t9
move a0, s1
move s0, v0
beqz v0, 0xd724
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_set_default(gp)
ori a1, zero, 0xffff
jalr t9
move a0, s0
beqz v0, 0xd894
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_get_id(gp)
jalr t9
move a0, s0
lw gp, 0x10(sp)
move a2, v0
move a0, s2
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.BIO_printf(gp)
jalr t9
addiu a1, a1, -0x7c50
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_free(gp)
jalr t9
move a0, s0
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_init(gp)
jalr t9
move a0, s0
bnez v0, 0xd7c4
lw gp, 0x10(sp)
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_print(gp)
jalr t9
addiu a0, a0, -0x7c3c
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_free(gp)
jalr t9
move a0, s0
--
beqz v0, 0xd798
lw gp, 0x10(sp)
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.ENGINE_ctrl_cmd_string(gp)
move a3, zero
move a2, s1
addiu a1, a1, -0x7c90
jalr t9
move a0, v0
beqz v0, 0xd788
lw gp, 0x10(sp)
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.ENGINE_ctrl_cmd_string(gp)
move a3, zero
move a2, zero
addiu a1, a1, -0x7c88
jalr t9
move a0, s0
bnez v0, 0xd680
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_free(gp)
jalr t9
move a0, s0
lw gp, 0x10(sp)
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.BIO_printf(gp)
move a2, s1
addiu a1, a1, -0x7c80
jalr t9
move a0, s2
lw gp, 0x10(sp)
lw t9, -sym.imp.ERR_print_errors(gp)
jalr t9
move a0, s2
lw gp, 0x10(sp)
lw t9, -sym.imp.OPENSSL_init_ssl(gp)
lui a0, 0x20
move a2, zero
ori a0, a0, 2
jalr t9
move a1, zero
lw gp, 0x10(sp)
move a2, zero
move a0, zero
lw t9, -sym.imp.OPENSSL_init_ssl(gp)
jalr t9
--
addiu a0, zero, 8
lw gp, 0x10(sp)
lw t9, -sym.imp.g_malloc(gp)
jalr t9
addiu a0, zero, 4
lw gp, 0x10(sp)
move s0, v0
lw v0, -0x7f44(gp)
lw t9, -sym.imp.g_mutex_new(gp)
jalr t9
sw s0, -0x3684(v0)
sw v0, (s0)
lw ra, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
addiu v0, zero, 1
jr ra
addiu sp, sp, 0x28
lw t9, -sym.imp.OPENSSL_config(gp)
jalr t9
move a0, zero
b 0xd7c4
lw gp, 0x10(sp)
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.BIO_printf(gp)
addiu a1, a1, -0x7cb8
jalr t9
move a0, s2
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_register_all_complete(gp)
jalr t9
nop
b 0xd7c4
lw gp, 0x10(sp)
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.BIO_printf(gp)
addiu a1, a1, -0x7c68
jalr t9
move a0, s2
lw gp, 0x10(sp)
lw t9, -sym.imp.ERR_print_errors(gp)
jalr t9
move a0, s2
lw gp, 0x10(sp)
lw t9, -sym.imp.ENGINE_free(gp)
jalr t9
move a0, s0
b 0xd7c4
lw gp, 0x10(sp)
lui gp, 2
addiu gp, gp, 0x6790
addu gp, gp, t9
lw v0, -0x7f44(gp)
lw t9, -sym.imp.g_mutex_free(gp)
lw v0, -0x3684(v0)
jr t9
--
move s5, v0
lw gp, 0x18(sp)
addiu a1, s2, -0x630c
move a3, zero
lw a2, -0x7fbc(gp)
lw t9, -sym.imp.g_key_file_get_integer(gp)
addiu a2, a2, -0x66ec
move a0, s0
jalr t9
move s2, v0
move s6, v0
beqz s3, 0xeec8
lw gp, 0x18(sp)
lw t9, -sym.command_channel_is_dispatcher_connection(gp)
bal sym.command_channel_is_dispatcher_connection
nop
beqz v0, 0xf0ac
lw gp, 0x18(sp)
lw t9, -sym.psk_create(gp)
bal sym.psk_create
nop
move fp, v0
beqz v0, 0xf16c
lw gp, 0x18(sp)
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a2, v0
move a1, s3
jalr t9
addiu a0, a0, -0x66d8
lw gp, 0x18(sp)
move a0, fp
lw t9, -sym.imp.g_free(gp)
jalr t9
move s7, v0
move a0, s3
lw gp, 0x18(sp)
b 0xf0b4
movn a0, s7, s7
beqz s5, 0xf0e0
lw a3, -0x7fbc(gp)
beqz s2, 0xf0e0
lw t9, -sym.tunnel_http_new(gp)
move a3, s4
move a2, v0
move a1, s2
--
lw s5, 8(a2)
andi v0, s1, 0x10
bnez v0, 0x10ac4
andi a0, s1, 4
bnez a0, 0x10b24
lw v0, 0x1c(s5)
andi s1, s1, 1
beqz s1, 0x10cb8
addiu a0, zero, 6
sltiu a0, v0, 8
beqz a0, 0x11088
lw a1, -0x7fbc(gp)
sll a0, v0, 2
addiu a1, a1, -0x6010
lwx a0, a0(a1)
addu a0, a0, gp
jr a0
nop
bal sym.web_user_get_passwd
nop
move s1, v0
beqz v0, 0x10ab4
lw gp, 0x20(sp)
lw a1, -0x7fd8(gp)
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a2, v0
addiu a1, a1, 0x7498
jalr t9
addiu a0, a0, 0x77d4
lw gp, 0x20(sp)
move a0, s1
lw t9, -sym.imp.g_free(gp)
jalr t9
move s1, v0
lw gp, 0x20(sp)
lw t9, -sym.imp.strlen(gp)
jalr t9
move a0, s1
lw gp, 0x20(sp)
move a1, v0
lw t9, -sym.imp.g_base64_encode(gp)
jalr t9
move a0, s1
lw gp, 0x20(sp)
move a0, s1
lw t9, -sym.imp.g_free(gp)
jalr t9
move s2, v0
lw gp, 0x20(sp)
move a1, s2
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, -main
lw gp, 0x20(sp)
move s1, v0
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s2
beqz s1, 0x10ab4
lw gp, 0x20(sp)
lw a0, 0x20(s5)
lw t9, 0x2c(sp)
jalr t9
move a1, s1
lw gp, 0x20(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
lw gp, 0x20(sp)
lw t9, -sym.command_channel_is_dispatcher_connection(gp)
bal sym.command_channel_is_dispatcher_connection
--
addiu t9, t9, 0x140
bal 0x10140
move a0, fp
beqz v0, 0x10ac4
lw gp, 0x20(sp)
b 0x10988
lw v0, 0x1c(s5)
bnez s7, 0x10b80
lw v0, 0x30(sp)
beqz v0, 0x109b8
lw t9, -sym.web_user_get_passwd(gp)
sll a1, v0, 2
lw a0, 0x20(s5)
lw t9, 0x2c(sp)
jalr t9
lwx a1, a1(s3)
lw gp, 0x20(sp)
lw t9, -0x7fd8(gp)
addiu t9, t9, -0x3c
bal 0xffc4
nop
lw gp, 0x20(sp)
move a2, v0
lw a1, -0x7fbc(gp)
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a1, a1, -0x61e8
jalr t9
addiu a0, a0, -0x61dc
lw a0, 0x20(s5)
lw t9, 0x2c(sp)
move a1, v0
jalr t9
move s1, v0
lw gp, 0x20(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
lw gp, 0x20(sp)
lw s2, (s3)
addiu a2, zero, -1
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.g_strsplit(gp)
addiu a1, a1, -0x61cc
jalr t9
move a0, s2
lw gp, 0x20(sp)
move a0, v0
lw t9, -sym.imp.g_strv_length(gp)
jalr t9
move s1, v0
addiu a0, zero, 3
bne v0, a0, 0x11208
lw gp, 0x20(sp)
lw a1, -0x7fd8(gp)
lw s2, 4(s1)
lw t9, -sym.imp.strstr(gp)
addiu a1, a1, 0x7f78
jalr t9
move a0, s2
beqz v0, 0x10c4c
lw gp, 0x20(sp)
lw t9, -sym.imp.strchr(gp)
addiu a1, zero, 0x2f
jalr t9
addiu a0, v0, 3
lw gp, 0x20(sp)
move s2, v0
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a3, 8(s1)
lw a1, (s1)
move a2, s2
jalr t9
addiu a0, a0, -0x61c8
lw gp, 0x20(sp)
move a0, s1
lw t9, -sym.imp.g_strfreev(gp)
jalr t9
move s1, v0
lw a0, 0x20(s5)
lw t9, 0x2c(sp)
jalr t9
move a1, s1
lw gp, 0x20(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
lw gp, 0x20(sp)
lw t9, -sym.imp.g_strfreev(gp)
--
lw t9, -sym.socket_set_io_direction(gp)
move a2, s0
lw a0, 0x10(v0)
bal sym.socket_set_io_direction
addiu a1, zero, 0x15
lw gp, 0x18(sp)
lw s2, (s0)
lw a2, 0x18(s0)
lw a1, -0x7fd8(gp)
lw t9, -sym.socket_new(gp)
lw a0, 0x28(sp)
bal sym.socket_new
addiu a1, a1, 0x918
lw gp, 0x18(sp)
sw v0, 0x10(s2)
lw v0, (s0)
lw t9, -sym.socket_set_io_direction(gp)
move a2, s0
lw a0, 0x10(v0)
bal sym.socket_set_io_direction
addiu a1, zero, 0x15
lw gp, 0x18(sp)
lw v0, 4(s0)
addiu s3, zero, 1
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a2, 0x14(v0)
lw a1, 0x18(v0)
jalr t9
addiu a0, a0, -0x6124
lw gp, 0x18(sp)
move a0, v0
lw t9, -sym.imp.strlen(gp)
jalr t9
move s2, v0
lw v1, 4(s0)
lw gp, 0x18(sp)
move a1, s2
lw a0, 0x24(v1)
lw t9, -sym.imp.g_byte_array_append(gp)
jalr t9
move a2, v0
lw gp, 0x18(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s2
lw v0, 4(s0)
lw gp, 0x18(sp)
sw s3, 0x1c(v0)
lw v0, (s0)
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a2, 0x14(v0)
lw a1, 0x18(v0)
jalr t9
addiu a0, a0, -0x60b4
lw gp, 0x18(sp)
move a0, v0
lw t9, -sym.imp.strlen(gp)
jalr t9
move s2, v0
lw v1, (s0)
lw gp, 0x18(sp)
move a2, v0
lw a0, 0x24(v1)
lw t9, -sym.imp.g_byte_array_append(gp)
jalr t9
move a1, s2
lw gp, 0x18(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s2
--
bal sym.socket_new
lw s2, 8(s0)
lw gp, 0x18(sp)
sw v0, 0x10(s2)
lw t9, -sym.command_channel_is_dispatcher_connection(gp)
bal sym.command_channel_is_dispatcher_connection
lw s2, 8(s0)
beqz v0, 0x11910
lw gp, 0x18(sp)
lw v0, 0x10(s2)
lw t9, -sym.ssl_create_dispatcher_client_instance(gp)
lw a1, 0x14(s2)
jalr t9
lw a0, (v0)
lw gp, 0x18(sp)
sw v0, 0xc(s2)
lw v0, 8(s0)
lw t9, -sym.socket_set_io_direction(gp)
move a2, s0
lw a0, 0x10(v0)
bal sym.socket_set_io_direction
addiu a1, zero, 0x15
lw gp, 0x18(sp)
lw v0, 8(s0)
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a2, 0x14(v0)
lw a1, 0x18(v0)
jalr t9
addiu a0, a0, 0x76dc
lw gp, 0x18(sp)
move a0, v0
lw t9, -sym.imp.strlen(gp)
jalr t9
move s2, v0
lw v1, 8(s0)
lw gp, 0x18(sp)
move a2, v0
lw a0, 0x24(v1)
lw t9, -sym.imp.g_byte_array_append(gp)
jalr t9
move a1, s2
lw gp, 0x18(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s2
--
sw s1, 0x20(sp)
beqz v0, 0x12070
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
lw a0, -0x7fbc(gp)
lw t9, -0x7fd8(gp)
addiu t9, t9, 0x1ac0
bal 0x11ac0
addiu a0, a0, -0x5ee4
lw gp, 0x10(sp)
move a0, v0
move s1, v0
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.g_strcmp0(gp)
jalr t9
addiu a1, a1, -0x5ed8
beqz v0, 0x120f0
lw gp, 0x10(sp)
lw v0, -0x7f44(gp)
lw a1, -0x3650(v0)
beqz a1, 0x1210c
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, -0x5eb8
lw gp, 0x10(sp)
sw v0, -0x3654(s0)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
lw ra, 0x24(sp)
lw v0, -0x3654(s0)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup(gp)
jalr t9
addiu a0, a0, -0x5ec0
sw v0, -0x3654(s0)
b 0x120cc
lw gp, 0x10(sp)
--
addiu a2, zero, 0x80
lw t9, -sym.imp.EVP_DigestUpdate(gp)
jalr t9
move a1, s3
lw gp, 0x20(sp)
addiu v0, sp, 0x40
addiu s7, sp, 0x6c
lw t9, -sym.imp.EVP_DigestFinal(gp)
move a0, s0
move a2, v0
move a1, s7
sw v0, 0x2c(sp)
lw s1, -0x7fbc(gp)
jalr t9
sw zero, 0x40(sp)
lw gp, 0x20(sp)
move a0, s0
addiu s6, sp, 0x80
lw t9, -sym.imp.EVP_MD_CTX_free(gp)
jalr t9
move fp, s7
lw gp, 0x20(sp)
move s4, s6
addiu s2, sp, 0xa8
addiu s0, s1, -0x5c0c
lw t9, -sym.imp.g_sprintf(gp)
lbu a2, (fp)
move a0, s4
move a1, s0
jalr t9
addiu s4, s4, 2
addiu fp, fp, 1
bne s2, s4, 0x13960
lw gp, 0x20(sp)
lw v0, -0x7fbc(gp)
lw t9, 0x28(sp)
sw zero, 0x3c(sp)
lw v0, -0x5bf0(v0)
lw s0, 0x34(sp)
jalr t9
sw v0, 0xac(sp)
lw gp, 0x20(sp)
addiu a2, zero, 4
move a1, s3
lw t9, -sym.imp.EVP_DigestUpdate(gp)
move a0, v0
--
jalr t9
sw zero, 0x40(sp)
lw gp, 0x20(sp)
move a0, s2
lw t9, -sym.imp.EVP_MD_CTX_free(gp)
jalr t9
move s2, s7
lw gp, 0x20(sp)
lw t9, -sym.imp.EVP_sha1(gp)
jalr t9
nop
lw gp, 0x20(sp)
addiu v1, zero, 0x14
move a3, s4
lw t9, -sym.imp.HMAC(gp)
move a1, s0
sw zero, 0x18(sp)
sw s7, 0x14(sp)
sw v1, 0x10(sp)
addiu a2, zero, 0x14
jalr t9
move a0, v0
lw gp, 0x20(sp)
move s0, s3
addiu s4, sp, 0xd4
lw t9, -sym.imp.g_sprintf(gp)
lbu a2, (s2)
move a0, s0
move a1, s1
jalr t9
addiu s0, s0, 2
addiu s2, s2, 1
bne s4, s0, 0x13b00
lw gp, 0x20(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
lw a0, 0x34(sp)
lw gp, 0x20(sp)
move a2, s3
move a1, s6
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, -0x5c04
lw gp, 0x20(sp)
lw a0, 0x12c(sp)
lw v1, (s5)
bne a0, v1, 0x13bd4
lw ra, 0x154(sp)
lw fp, 0x150(sp)
lw s7, 0x14c(sp)
lw s6, 0x148(sp)
lw s5, 0x144(sp)
lw s4, 0x140(sp)
lw s3, 0x13c(sp)
lw s2, 0x138(sp)
lw s1, 0x134(sp)
lw s0, 0x130(sp)
jr ra
addiu sp, sp, 0x158
lw v0, 0x38(sp)
lw a3, -0x7fd8(gp)
--
sw s4, 0x38(sp)
sw s3, 0x34(sp)
sw s2, 0x30(sp)
sw s0, 0x28(sp)
lw v0, (s1)
sw a1, 0x1c(sp)
sw a2, 0x48(sp)
sw a3, 0x18(sp)
sw v0, 0x24(sp)
lw s2, -0x7f44(gp)
bal sym.config_get_log_file
move s4, a0
lw gp, 0x10(sp)
addiu a0, s2, -0x3610
lw t9, -sym.imp.g_static_mutex_get_mutex_impl(gp)
jalr t9
move s0, v0
lw gp, 0x10(sp)
lw t9, -sym.imp.g_mutex_lock(gp)
jalr t9
move a0, v0
lw gp, 0x10(sp)
lw a3, 0x18(sp)
lw a2, 0x48(sp)
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a1, 0x1c(sp)
jalr t9
addiu a0, a0, -0x5be0
move s3, v0
addiu v0, sp, 0x50
lw gp, 0x10(sp)
beqz s0, 0x13c98
sw v0, 0x20(sp)
lb v0, (s0)
bnez v0, 0x13d20
lw a1, -0x7fbc(gp)
lw t9, -sym.imp.__vsyslog_chk(gp)
lw a3, 0x20(sp)
move a2, s3
addiu a1, zero, 1
jalr t9
move a0, s4
lw gp, 0x10(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9

[*] Function printf used 30 times stclient