[*] Binary protection state of audio-service

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of audio-service

lw s0, 0x30(sp)
jr t9
addiu sp, sp, 0x48
lui gp, 2
addiu gp, gp, 0x3f28
addu gp, gp, t9
addiu sp, sp, -0x78
sw s4, 0x60(sp)
lw s4, -0x7dec(gp)
sw gp, 0x38(sp)
sw ra, 0x74(sp)
sw fp, 0x70(sp)
sw s7, 0x6c(sp)
sw s6, 0x68(sp)
sw s5, 0x64(sp)
sw s3, 0x5c(sp)
sw s2, 0x58(sp)
sw s1, 0x54(sp)
sw s0, 0x50(sp)
lw v0, (s4)
sw zero, 0x48(sp)
sw v0, 0x4c(sp)
beqz a0, 0x6390
move s1, a0
lw a0, -0x7fd8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, a0, -0xdc
jalr t9
move fp, a1
lw gp, 0x38(sp)
addiu s0, sp, 0x48
move a3, s0
lw a2, -0x7fd8(gp)
lw t9, -sym.imp.g_key_file_get_boolean(gp)
addiu a2, a2, -0xcc
move a1, v0
move a0, s1
jalr t9
move s2, v0
lw v1, 0x48(sp)
lw gp, 0x38(sp)
beqz v1, 0x619c
move s5, v0
lw t9, -sym.imp.g_clear_error(gp)
jalr t9
move a0, s0
--
lw t9, -sym.imp.g_object_get(gp)
move a0, s0
move a3, zero
addiu a2, sp, 0x2c
jalr t9
addiu a1, a1, -0x324
lw a0, 0x2c(sp)
lw v0, 4(a0)
beqz v0, 0x6724
lw gp, 0x20(sp)
lw s5, -0x7fd8(gp)
move s0, zero
addiu s5, s5, 0x88
b 0x6680
addiu s2, s2, 0x1db0
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s7
lw a0, 0x2c(sp)
addiu s0, s0, 1
lw v0, 4(a0)
sltu v0, s0, v0
beqz v0, 0x6724
lw gp, 0x20(sp)
lw v0, (a0)
lw t9, -sym.imp.g_strdup_printf(gp)
sll s1, s0, 2
move a1, s0
move a0, s5
jalr t9
lwx s1, s1(v0)
lw gp, 0x20(sp)
lw t9, -sym.audio_service_dbus_audio1_device_interface_info(gp)
bal sym.audio_service_dbus_audio1_device_interface_info
move s7, v0
lw gp, 0x20(sp)
sw s3, 0x18(sp)
sw zero, 0x14(sp)
lw t9, -sym.imp.g_dbus_connection_register_object(gp)
sw s1, 0x10(sp)
move a3, s2
move a2, v0
move a1, s7
jalr t9
move a0, s4
bnez v0, 0x665c
--
lw gp, 0x20(sp)
lw v0, -0x7fd8(gp)
lw s3, -0x7fd8(gp)
sw v0, 0x34(sp)
lw s2, -0x7fd8(gp)
addiu s3, s3, 0x504
addiu fp, sp, 0x38
b 0x7a70
addiu s6, v0, 0x534
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s0
lw gp, 0x20(sp)
lw t9, -sym.imp.g_dir_read_name(gp)
jalr t9
move a0, s1
move s0, v0
beqz v0, 0x7c14
lw gp, 0x20(sp)
lw t9, -sym.imp.g_str_has_suffix(gp)
addiu a1, s2, 0x500
jalr t9
move a0, s0
beqz v0, 0x7a58
lw gp, 0x20(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a2, s0
move a1, s4
jalr t9
move a0, s3
lw gp, 0x20(sp)
addiu a1, zero, 2
move a0, v0
lw t9, -sym.imp.g_module_open(gp)
jalr t9
move s0, v0
beqz v0, 0x7b10
lw gp, 0x20(sp)
lw t9, -sym.imp.g_module_make_resident(gp)
move a0, v0
jalr t9
sw v0, 0x2c(sp)
lw gp, 0x20(sp)
lw v0, 0x2c(sp)
move a2, fp
lw t9, -sym.imp.g_module_symbol(gp)

[*] Function printf used 3 times audio-service