[*] Binary protection state of axfer
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of axfer
lw ra, 0x3c(sp)
lw s4, 0x38(sp)
lw s3, 0x34(sp)
lw s2, 0x30(sp)
lw s1, 0x2c(sp)
lw s0, 0x28(sp)
jr ra
addiu sp, sp, 0x40
lw t9, -0x7f6c(gp)
bal 0xf9e0
addiu s0, s0, 3
lw gp, 0x20(sp)
move a0, v0
lw t9, -sym.imp.log10(gp)
jalr t9
move a1, v1
lw gp, 0x20(sp)
move a0, v0
lw t9, -0x7f68(gp)
bal 0xf970
move a1, v1
addu s0, v0, s0
b 0x9544
lw gp, 0x20(sp)
lw a2, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snprintf(gp)
move a3, s3
move a1, s0
addiu a2, a2, 0x860
jalr t9
move a0, v0
lw ra, 0x3c(sp)
lw s4, 0x38(sp)
lw s3, 0x34(sp)
lw s2, 0x30(sp)
lw s1, 0x2c(sp)
lw s0, 0x28(sp)
move v0, zero
jr ra
addiu sp, sp, 0x40
b 0x95a4
addiu v0, zero, -0xc
lui gp, 2
addiu gp, gp, 0x29c4
addu gp, gp, t9
addiu sp, sp, -0x48
--
lw gp, 0x10(sp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
beq v0, v1, 0xa9b8
lw t9, -sym.imp.snd_pcm_hw_params_can_pause(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
lbu v1, 0x18(s0)
beqz v1, 0xa9e4
lw ra, 0x24(sp)
lw t9, -sym.imp.snd_strerror(gp)
move a0, v0
jalr t9
lw s0, 4(s0)
lw gp, 0x10(sp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
move a0, s0
lw t9, -sym.imp.snd_output_printf(gp)
lw s0, 0x1c(sp)
move a2, v0
addiu a1, a1, 0x2174
jr t9
addiu sp, sp, 0x28
lui gp, 2
addiu gp, gp, 0x15b8
addu gp, gp, t9
addiu sp, sp, -0x20
lw t9, -sym.imp.free(gp)
sw s0, 0x18(sp)
lw s0, 0xc(a0)
sw ra, 0x1c(sp)
sw gp, 0x10(sp)
jalr t9
lw a0, 0x1c(s0)
lw gp, 0x10(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x20(s0)
--
lw gp, 0x10(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x14(s0)
lw gp, 0x10(sp)
lw ra, 0x24(sp)
sw zero, 0x14(s0)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
lw t9, -sym.imp.snd_config_update_free_global(gp)
jr t9
addiu sp, sp, 0x28
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
lw t9, -sym.imp.snd_strerror(gp)
move a0, v0
jalr t9
lw s1, 4(s0)
lw gp, 0x10(sp)
move a2, v0
move a0, s1
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x21b8
b 0xabd0
lw gp, 0x10(sp)
lw a0, (s0)
lw t9, -sym.imp.snd_pcm_drop(gp)
jalr t9
nop
bgez v0, 0xabbc
lw gp, 0x10(sp)
lw t9, -sym.imp.snd_strerror(gp)
move a0, v0
jalr t9
lw s1, 4(s0)
lw gp, 0x10(sp)
move a2, v0
move a0, s1
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x218c
b 0xabbc
lw gp, 0x10(sp)
move a0, s1
jalr t9
lw s1, 4(s0)
lw gp, 0x10(sp)
move a2, v0
move a0, s1
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x21a0
b 0xabbc
lw gp, 0x10(sp)
lw t9, -sym.imp.snd_pcm_nonblock(gp)
lw a0, (s0)
jalr t9
addiu a1, zero, 1
b 0xabb4
lw gp, 0x10(sp)
jalr t9
move a1, zero
lw gp, 0x10(sp)
b 0xab94
lw a0, (s0)
lui gp, 2
addiu gp, gp, 0x12f0
addu gp, gp, t9
addiu sp, sp, -0x28
sw s0, 0x1c(sp)
--
lw t9, 4(v0)
jalr t9
move a0, s0
move s1, v0
bltz v0, 0xad84
lw gp, 0x10(sp)
lw ra, 0x24(sp)
move v0, s1
lw s0, 0x1c(sp)
lw s1, 0x20(sp)
jr ra
addiu sp, sp, 0x28
addiu v0, zero, -0xb
beq s1, v0, 0xad6c
addiu v0, zero, -0x20
beql s1, v0, 0xaddc
lw v0, 0x44(s0)
lw t9, -sym.imp.snd_strerror(gp)
move a0, s1
jalr t9
lw s0, 4(s0)
lw gp, 0x10(sp)
move a0, s0
move a2, v0
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x21d0
lw ra, 0x24(sp)
move v0, s1
lw s0, 0x1c(sp)
lw s1, 0x20(sp)
jr ra
addiu sp, sp, 0x28
andi v0, v0, 1
bnez v0, 0xad9c
lw t9, -sym.imp.snd_strerror(gp)
lw t9, -sym.imp.snd_pcm_prepare(gp)
jalr t9
lw a0, (s0)
move s1, v0
bltz v0, 0xad98
lw gp, 0x10(sp)
lw ra, 0x24(sp)
move v0, s1
lw s0, 0x1c(sp)
--
jalr t9
addiu a1, zero, 4
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw a2, 0x40(sp)
lw a1, 8(s0)
jalr t9
lw a0, (s0)
lw gp, 0x18(sp)
lw a0, 0x40(sp)
lw t9, -sym.imp.snd_pcm_access_mask_free(gp)
jalr t9
move s4, v0
bgez s4, 0xb01c
lw gp, 0x18(sp)
b 0xb394
addiu fp, zero, -6
lw t9, -sym.imp.snd_pcm_name(gp)
lw a0, (s0)
jalr t9
lw s4, 4(s0)
lw gp, 0x18(sp)
move a2, v0
move a0, s4
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x2348
lw gp, 0x18(sp)
lw a1, 4(s0)
lw t9, -sym.imp.snd_pcm_hw_params_dump(gp)
jalr t9
lw a0, 8(s0)
lw gp, 0x18(sp)
lw t0, (s6)
lw a2, 0x28(s0)
lw a1, 0x2c(s0)
lw a0, 0x30(s0)
lw v1, 0x34(s0)
lw t1, (s5)
lw s4, (s3)
addiu v0, zero, -1
sw t1, 0x28(sp)
sw t0, 0x2c(sp)
sw a2, 0x30(sp)
sw a1, 0x34(sp)
--
bltz v0, 0xb368
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_hw_params_get_format_mask(gp)
lw a1, 0x40(sp)
lw a0, 8(s0)
jalr t9
move s4, zero
addiu fp, zero, 0x35
b 0xb320
lw gp, 0x18(sp)
addiu s4, s4, 1
beq s4, fp, 0xba40
lw t9, -sym.imp.snd_pcm_format_mask_free(gp)
lw t9, -sym.imp.snd_pcm_format_mask_test(gp)
lw a0, 0x40(sp)
jalr t9
move a1, s4
beqz v0, 0xb314
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_format_mask_free(gp)
jalr t9
lw a0, 0x40(sp)
b 0xb058
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a2, 0x3c(sp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x24e0
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x250c
lw gp, 0x18(sp)
lw a1, 4(s0)
lw t9, -sym.imp.snd_pcm_hw_params_dump(gp)
jalr t9
lw a0, 8(s0)
lw gp, 0x18(sp)
lw a1, 0x44(sp)
lw a0, (s2)
bne a1, a0, 0xbbdc
move v0, fp
lw ra, 0x6c(sp)
lw fp, 0x68(sp)
lw s7, 0x64(sp)
lw s6, 0x60(sp)
lw s5, 0x5c(sp)
lw s4, 0x58(sp)
lw s3, 0x54(sp)
--
b 0xb130
lw v0, 0x38(sp)
beqz a0, 0xb444
lw t9, -sym.imp.snd_pcm_hw_params_set_period_size_near(gp)
lui a1, 0xf
addiu a1, a1, 0x4240
mul v0, v0, a1
lw a1, 0x2c(sp)
divu zero, v0, a1
teq a1, zero, 7
mflo v0
sltu v0, v0, a0
beqz v0, 0xb15c
lw t9, -sym.imp.snd_pcm_hw_params_set_period_time_near(gp)
sw zero, 0x30(sp)
lw t9, -sym.imp.snd_pcm_hw_params_set_period_size_near(gp)
lw a0, (s0)
move a3, zero
addiu a2, sp, 0x38
jalr t9
move a1, v1
move fp, v0
bgez v0, 0xb17c
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a2, 0x38(sp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x248c
b 0xb368
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_hw_params_set_buffer_time_near(gp)
move a3, zero
jalr t9
addiu a2, sp, 0x34
move fp, v0
bgez v0, 0xb1a4
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a2, 0x34(sp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x24b8
b 0xb368
lw gp, 0x18(sp)
jalr t9
lw a0, (s0)
bnez v0, 0xbb14
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_hw_params_can_disable_period_wakeup(gp)
jalr t9
lw a0, 8(s0)
beqz v0, 0xbaf4
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_hw_params_set_period_wakeup(gp)
lw a1, 8(s0)
lw a0, (s0)
jalr t9
move a2, zero
bgez v0, 0xaf3c
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x22dc
addiu fp, zero, -6
b 0xb394
lw gp, 0x18(sp)
jalr t9
move a1, zero
lw gp, 0x18(sp)
lw a0, 0x40(sp)
lw t9, -sym.imp.snd_pcm_access_mask_set(gp)
jalr t9
addiu a1, zero, 1
b 0xafa0
lw gp, 0x18(sp)
move a2, zero
addiu a1, sp, 0x34
jalr t9
move a0, v1
move fp, v0
bltz v0, 0xbad8
lw gp, 0x18(sp)
lui v0, 7
lw a0, 0x34(sp)
ori v0, v0, 0xa121
sltu a0, a0, v0
bnez a0, 0xb12c
lw v1, 8(s0)
addiu v0, v0, -1
b 0xb12c
sw v0, 0x34(sp)
lw t9, -sym.imp.snd_pcm_stream_name(gp)
lw a0, (s1)
jalr t9
lw s1, 4(s0)
lw gp, 0x18(sp)
lw a3, 0x1c(s0)
move a2, v0
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
addiu a1, a1, 0x21fc
jalr t9
move a0, s1
addiu fp, zero, -6
b 0xb394
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_format_name(gp)
move a0, s4
jalr t9
lw s1, 4(s0)
lw gp, 0x18(sp)
move a0, fp
lw t9, -sym.imp.snd_strerror(gp)
jalr t9
move s3, v0
lw gp, 0x18(sp)
move a3, v0
move a2, s3
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
addiu a1, a1, 0x236c
jalr t9
move a0, s1
b 0xb368
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_strerror(gp)
move a0, v0
lw s1, 4(s0)
jalr t9
lw s3, 0x28(sp)
lw gp, 0x18(sp)
move a3, v0
move a2, s3
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
addiu a1, a1, 0x23c0
jalr t9
move a0, s1
b 0xb368
lw gp, 0x18(sp)
sltiu v0, v0, 2
beqz v0, 0xafd0
lw t9, -sym.imp.snd_pcm_stream(gp)
jalr t9
lw a0, (s0)
addiu v1, zero, 1
beq v0, v1, 0xba74
lw gp, 0x18(sp)
lw v0, -obj.xfer_libasound_timer_mmap_w_ops(gp)
sw v0, 0x10(s0)
lw s3, 0xc(v0)
bnez s3, 0xb810
lw t9, -sym.imp.malloc(gp)
lw t9, (v0)
jalr t9
--
lw a3, 0x38(s0)
lw s4, (s6)
lw s3, (s7)
lw s6, 0x3c(s0)
beqz a3, 0xb740
lw s5, 0x40(s0)
mul v0, s4, a3
lui a2, 0x431b
ori a2, a2, 0xde83
lui v1, 0xf
addiu v1, v1, 0x4240
multu v0, a2
mfhi a2
sltu v0, v0, v1
bnez v0, 0xb9f0
srl a2, a2, 0x12
sltu v0, s3, a2
bnez v0, 0xbba4
lw t9, -sym.imp.snd_pcm_sw_params_set_avail_min(gp)
lw a1, 0xc(s0)
jalr t9
lw a0, (s0)
bgez v0, 0xb740
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x2570
lw gp, 0x18(sp)
addiu fp, zero, -0x16
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x2660
lw gp, 0x18(sp)
lw a1, 4(s0)
lw t9, -sym.imp.snd_pcm_sw_params_dump(gp)
jalr t9
lw a0, 0xc(s0)
b 0xb394
lw gp, 0x18(sp)
bnez s6, 0xb868
mul v0, s4, s6
beqz s5, 0xb794
mul v0, s4, s5
lui a2, 0x431b
ori a2, a2, 0xde83
lui v1, 0xf
addiu v1, v1, 0x4240
multu v0, a2
mfhi a2
--
lw t9, -sym.imp.snd_pcm_sw_params(gp)
lw a1, 0xc(s0)
jalr t9
lw a0, (s0)
move fp, v0
bltz v0, 0xb710
lw gp, 0x18(sp)
lw v0, 0x18(s1)
bnez v0, 0xba80
lw t9, -sym.imp.snd_pcm_dump(gp)
lhu v0, 0x44(s0)
andi v0, v0, 0x100
bnel v0, zero, 0xb8ec
lw v0, 0x48(s0)
b 0xb394
move fp, zero
lw t9, -sym.imp.snd_strerror(gp)
move a0, v0
lw s1, 4(s0)
jalr t9
lw s3, 0x2c(sp)
lw gp, 0x18(sp)
move a3, v0
move a2, s3
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
addiu a1, a1, 0x2408
jalr t9
move a0, s1
b 0xb368
lw gp, 0x18(sp)
jalr t9
move a0, s3
lw gp, 0x18(sp)
beqz v0, 0xbbc4
sw v0, 0x14(s0)
lw t9, -sym.imp.memset(gp)
move a2, s3
move a1, zero
jalr t9
move a0, v0
b 0xb67c
lw v0, 0x10(s0)
srl v0, v0, 2
b 0xb440
sw v0, 0x38(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x2398
b 0xb368
lw gp, 0x18(sp)
lui a2, 0x431b
ori a2, a2, 0xde83
lui v1, 0xf
addiu v1, v1, 0x4240
multu v0, a2
mfhi a2
sltu v0, v0, v1
bnez v0, 0xbbcc
srl a2, a2, 0x12
sltu v0, s3, a2
bnez v0, 0xbb6c
lw t9, -sym.imp.snd_pcm_sw_params_set_start_threshold(gp)
lw a1, 0xc(s0)
jalr t9
lw a0, (s0)
bgez v0, 0xb748
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x25d4
addiu fp, zero, -0x16
b 0xb710
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a2, 0x30(sp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x2464
b 0xb368
lw gp, 0x18(sp)
beql v0, zero, 0xb98c
lw v0, 0x18(s1)
lw t9, -sym.imp.snd_pcm_poll_descriptors_count(gp)
jalr t9
lw a0, (s0)
move fp, v0
bltz v0, 0xb394
lw gp, 0x18(sp)
beqz v0, 0xafd0
lw t9, -sym.imp.malloc(gp)
jalr t9
addiu a0, zero, 0x14
move s3, fp
lw gp, 0x18(sp)
--
move a2, fp
bal sym.waiter_context_init
move a0, v0
move fp, v0
bltz v0, 0xb394
lw gp, 0x18(sp)
lw v0, 0x4c(s0)
lw t9, -sym.imp.snd_pcm_poll_descriptors(gp)
lw a0, (s0)
lw a1, 0xc(v0)
jalr t9
move a2, s3
move fp, v0
bltz v0, 0xb394
lw gp, 0x18(sp)
lw t9, -sym.waiter_context_prepare(gp)
bal sym.waiter_context_prepare
lw a0, 0x4c(s0)
move fp, v0
bltz v0, 0xb394
lw gp, 0x18(sp)
lw v0, 0x18(s1)
beql v0, zero, 0xb394
move fp, zero
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x269c
lw gp, 0x18(sp)
lw a0, 0x48(s0)
lw s0, 4(s0)
lw t9, -sym.waiter_label_from_type(gp)
bal sym.waiter_label_from_type
move fp, zero
lw gp, 0x18(sp)
move a2, v0
move a0, s0
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x2694
b 0xb394
lw gp, 0x18(sp)
lw v0, -obj.xfer_libasound_irq_mmap_r_ops(gp)
b 0xb670
sw v0, 0x10(s0)
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw a0, 4(s0)
addiu v0, v0, 0x21f4
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
sw a2, 0x10(sp)
sw s4, 0x14(sp)
move a2, v0
jalr t9
addiu a1, a1, 0x252c
addiu fp, zero, -0x16
b 0xb710
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x23ec
b 0xb368
lw gp, 0x18(sp)
lw a0, 0x40(sp)
jalr t9
addiu fp, zero, -0x16
lw gp, 0x18(sp)
lw a0, 4(s0)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x26ac
b 0xb368
lw gp, 0x18(sp)
b 0xb670
sw v0, 0x10(s0)
lw v0, -obj.xfer_libasound_timer_mmap_r_ops(gp)
b 0xb670
sw v0, 0x10(s0)
lw a1, 4(s0)
jalr t9
lw a0, (s0)
lw gp, 0x18(sp)
lw a0, 4(s0)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
addiu a1, a1, 0x2680
lw gp, 0x18(sp)
lw v0, 0x50(s0)
lw a0, 4(s0)
lw a2, -0x7fd8(gp)
sll v0, v0, 2
addiu a2, a2, 0x3f64
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lwx a2, v0(a2)
jalr t9
addiu a1, a1, 0x2694
b 0xb7bc
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x2434
b 0xb368
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x2268
addiu fp, zero, -6
b 0xb394
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x2228
addiu fp, zero, -6
b 0xb394
lw gp, 0x18(sp)
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw a0, 4(s0)
addiu v0, v0, 0x21ec
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
sw a2, 0x10(sp)
sw s4, 0x14(sp)
move a3, s5
move a2, v0
jalr t9
addiu a1, a1, 0x25f8
addiu fp, zero, -0x16
b 0xb710
lw gp, 0x18(sp)
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw a0, 4(s0)
addiu v0, v0, 0x21ec
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
sw a2, 0x10(sp)
sw s4, 0x14(sp)
move a3, s6
move a2, v0
jalr t9
addiu a1, a1, 0x2590
addiu fp, zero, -0x16
b 0xb710
lw gp, 0x18(sp)
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw a0, 4(s0)
b 0xb9fc
addiu v0, v0, 0x21ec
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw a0, 4(s0)
b 0xbb40
addiu v0, v0, 0x21f4
b 0xb394
addiu fp, zero, -0xc
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw a0, 4(s0)
b 0xbb78
addiu v0, v0, 0x21f4
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x263c
addiu fp, zero, -0x16
b 0xb710
lw gp, 0x18(sp)
lui gp, 2
addiu gp, gp, 0x408
addu gp, gp, t9
addiu sp, sp, -0x30
addiu v0, zero, 0x44
sw s0, 0x24(sp)
lw s0, -0x7d6c(gp)
sw gp, 0x10(sp)
sw s1, 0x28(sp)
lw v1, (s0)
sw ra, 0x2c(sp)
sw v1, 0x1c(sp)
lw s1, 0xc(a0)
beq a1, v0, 0xbd64
--
lw s0, 0x30(sp)
jr ra
addiu sp, sp, 0x58
lw t9, -sym.imp.snd_pcm_mmap_commit(gp)
lw a1, 0x20(sp)
jalr t9
lw a0, (s1)
move s0, v0
bltz v0, 0xdcbc
lw gp, 0x10(sp)
lw v0, 0x28(sp)
bne v0, s0, 0xdd54
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
sw s0, (s3)
b 0xdcbc
move s0, zero
lw v0, 0x1c(sp)
lw t9, -sym.imp.snd_pcm_frames_to_bytes(gp)
lw a1, 0x20(sp)
lw a0, (s1)
jalr t9
lw s0, (v0)
addu a1, s0, v0
b 0xdc8c
lw gp, 0x10(sp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
jalr t9
addiu a1, a1, 0x29c4
lw gp, 0x10(sp)
sw s0, (s3)
b 0xdcbc
move s0, zero
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, -0x1d70
addu gp, gp, t9
addiu sp, sp, -0x30
lw t9, -sym.imp.snd_pcm_status(gp)
sw s1, 0x1c(sp)
lw s1, 0x14(a0)
sw s2, 0x20(sp)
sw s0, 0x18(sp)
move s2, a1
--
lw v1, (s2)
bne a0, v1, 0xe1a4
move v0, s0
lw ra, 0x5c(sp)
lw fp, 0x58(sp)
lw s7, 0x54(sp)
lw s6, 0x50(sp)
lw s5, 0x4c(sp)
lw s4, 0x48(sp)
lw s3, 0x44(sp)
lw s2, 0x40(sp)
lw s1, 0x3c(sp)
lw s0, 0x38(sp)
jr ra
addiu sp, sp, 0x60
lw t9, -sym.imp.snd_pcm_mmap_begin(gp)
lw a0, (s1)
addiu a3, sp, 0x2c
addiu a2, sp, 0x28
jalr t9
addiu a1, sp, 0x30
move s0, v0
bltz v0, 0xe038
lw gp, 0x10(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
jalr t9
addiu a1, a1, 0x29f0
lw v0, 8(s3)
beqz v0, 0xe164
lw gp, 0x10(sp)
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw fp, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw s7, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw s6, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
addiu v0, v0, 0x2a5c
move s5, zero
move s4, zero
addiu fp, fp, 0x2a14
addiu s7, s7, 0x2a2c
addiu s6, s6, 0x2a40
sw v0, 0x1c(sp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
move a2, s4
lw s0, 0x30(sp)
jalr t9
move a1, fp
lw gp, 0x10(sp)
addu s0, s0, s5
lw a0, 4(s1)
lw t9, -sym.imp.snd_output_printf(gp)
lw a2, (s0)
jalr t9
move a1, s7
lw gp, 0x10(sp)
lw a2, 4(s0)
lw a0, 4(s1)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
move a1, s6
lw gp, 0x10(sp)
lw a2, 8(s0)
lw a0, 4(s1)
lw t9, -sym.imp.snd_output_printf(gp)
lw a1, 0x1c(sp)
jalr t9
addiu s4, s4, 1
lw v0, 8(s3)
lw gp, 0x10(sp)
sltu v0, s4, v0
bnez v0, 0xe0e8
addiu s5, s5, 0xc
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
jalr t9
addiu a1, a1, 0x1958
move s0, zero
b 0xe038
lw gp, 0x10(sp)
lw a0, 8(s3)
jalr t9
addiu a1, zero, 4
lw gp, 0x10(sp)
bnez v0, 0xe02c
sw v0, 4(s3)
b 0xe038
nop
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, -0x21a0
addu gp, gp, t9
--
lw a0, 0x34(sp)
lw v1, (s2)
bne a0, v1, 0xee3c
move v0, s0
lw ra, 0x5c(sp)
lw fp, 0x58(sp)
lw s7, 0x54(sp)
lw s6, 0x50(sp)
lw s5, 0x4c(sp)
lw s4, 0x48(sp)
lw s3, 0x44(sp)
lw s2, 0x40(sp)
lw s1, 0x3c(sp)
lw s0, 0x38(sp)
jr ra
addiu sp, sp, 0x60
lw a0, (s1)
addiu a3, sp, 0x28
addiu a2, sp, 0x24
jalr t9
addiu a1, sp, 0x30
move s0, v0
bltz v0, 0xece8
lw gp, 0x10(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
jalr t9
addiu a1, a1, 0x29f0
lw v0, 0x10(s3)
beqz v0, 0xece4
lw gp, 0x10(sp)
lw v0, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw fp, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw s7, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw s6, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
addiu v0, v0, 0x2a5c
move s5, zero
move s4, zero
addiu fp, fp, 0x2a14
addiu s7, s7, 0x2a2c
addiu s6, s6, 0x2a40
sw v0, 0x1c(sp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
move a2, s4
lw s0, 0x30(sp)
jalr t9
move a1, fp
lw gp, 0x10(sp)
addu s0, s0, s5
lw a0, 4(s1)
lw t9, -sym.imp.snd_output_printf(gp)
lw a2, (s0)
jalr t9
move a1, s7
lw gp, 0x10(sp)
lw a2, 4(s0)
lw a0, 4(s1)
lw t9, -sym.imp.snd_output_printf(gp)
jalr t9
move a1, s6
lw gp, 0x10(sp)
lw a2, 8(s0)
lw a0, 4(s1)
lw t9, -sym.imp.snd_output_printf(gp)
lw a1, 0x1c(sp)
jalr t9
addiu s4, s4, 1
lw v0, 0x10(s3)
lw gp, 0x10(sp)
sltu v0, s4, v0
bnez v0, 0xed94
addiu s5, s5, 0xc
b 0xece8
move s0, zero
lw t9, -sym.imp.calloc(gp)
lw a0, 0x10(s3)
jalr t9
addiu a1, zero, 4
lw gp, 0x10(sp)
bnez v0, 0xecd8
sw v0, 8(s3)
b 0xece8
nop
lw t9, -sym.imp.__stack_chk_fail(gp)
--
addiu v0, zero, -0xb
lw a0, 0x3c(sp)
lw v1, (s2)
bne a0, v1, 0xf118
lw ra, 0x64(sp)
lw fp, 0x60(sp)
lw s7, 0x5c(sp)
lw s6, 0x58(sp)
lw s5, 0x54(sp)
lw s4, 0x50(sp)
lw s3, 0x4c(sp)
lw s2, 0x48(sp)
lw s1, 0x44(sp)
lw s0, 0x40(sp)
jr ra
addiu sp, sp, 0x68
lw t9, -sym.imp.snd_pcm_avail(gp)
jalr t9
lw a0, (s1)
bltz v0, 0xefa0
lw gp, 0x18(sp)
sltu v1, v0, s7
beqz v1, 0xf028
lw s6, 0x38(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
move a2, s7
sw s0, 0x10(sp)
move a3, v0
addiu a1, a1, 0x2a88
jalr t9
move s7, v0
lw gp, 0x18(sp)
lw s6, 0x38(sp)
lw s4, 0x14(s1)
lw fp, 0x34(sp)
sw s7, (s3)
lw a1, 8(s4)
beqz a1, 0xf0fc
lw t9, -sym.imp.snd_pcm_frames_to_bytes(gp)
lw v0, 0x10(s4)
beqz v0, 0xf098
move s7, zero
sll s0, s7, 2
lw v0, (fp)
--
addiu s7, s7, 1
lw a0, (s0)
sltu v1, s7, v1
addu v0, a0, v0
lw gp, 0x18(sp)
sw v0, (s0)
bnez v1, 0xf04c
addiu fp, fp, 0xc
lw t9, -sym.mapper_context_process_frames(gp)
lw a0, 0x24(sp)
move a3, s5
bal sym.mapper_context_process_frames
move a2, s3
bltz v0, 0xefa0
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_mmap_commit(gp)
lw a2, (s3)
lw a1, 0x38(sp)
jalr t9
lw a0, (s1)
lw v1, (s3)
lw gp, 0x18(sp)
beq v1, v0, 0xf0f0
move s0, v0
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s1)
jalr t9
addiu a1, a1, 0x2ab4
lw gp, 0x18(sp)
sw s0, (s3)
b 0xefa0
move v0, zero
lw a0, (s1)
lw s0, (fp)
jalr t9
move a1, s6
addu a1, s0, v0
b 0xf098
lw gp, 0x18(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, -0x3114
addu gp, gp, t9
--
lw t9, -sym.imp.snd_pcm_hw_params_get_format(gp)
lw a0, 8(s0)
jalr t9
addiu a1, sp, 0x30
bltz v0, 0xf1b4
lw gp, 0x18(sp)
lw v0, 0x30(sp)
lw t9, -sym.imp.snd_pcm_areas_silence(gp)
lw a2, 0x10(s5)
lw a3, 0x2c(sp)
lw a1, 0x28(sp)
lw a0, 0x24(sp)
jalr t9
sw v0, 0x10(sp)
bltz v0, 0xf1b4
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_mmap_commit(gp)
lw a2, 0x2c(sp)
lw a1, 0x28(sp)
jalr t9
lw a0, (s0)
lw v1, 0x2c(sp)
beq v0, v1, 0xf304
lw gp, 0x18(sp)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a0, 4(s0)
jalr t9
addiu a1, a1, 0x29c4
lw gp, 0x18(sp)
lw t9, -sym.imp.snd_pcm_start(gp)
jalr t9
lw a0, (s0)
bltz v0, 0xf1b4
lw gp, 0x18(sp)
addiu v0, zero, 1
sb v0, 4(s2)
move v0, zero
b 0xf1b8
sw zero, (s3)
lw a0, (s0)
jalr t9
addiu a1, v0, -0x20
bltz v0, 0xf1b4
lw gp, 0x18(sp)
lbu v1, 0x18(s0)
beql v1, zero, 0xf220
sb zero, 4(s2)
lw a1, -sym.imp.snd_pcm_hw_params_set_access_mask(gp)
lw t9, -sym.imp.snd_output_printf(gp)
lw a3, 0x14(s6)
lw a0, 4(s0)
move a2, v0
jalr t9
addiu a1, a1, 0x2aec
b 0xf21c
lw gp, 0x18(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, -0x336c
addu gp, gp, t9
addiu sp, sp, -0x38
lw t9, -sym.imp.snd_pcm_status(gp)
sw s1, 0x20(sp)
lw s1, 0x14(a0)
sw s2, 0x24(sp)
sw s0, 0x1c(sp)
move s2, a1
--
move a1, s2
addiu t9, t9, -0x11b8
bal 0xee48
move a0, s0
bltz v0, 0xf3fc
lw ra, 0x34(sp)
lw s5, 0x30(sp)
lw s4, 0x2c(sp)
lw s3, 0x28(sp)
lw s2, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
move v0, zero
jr ra
addiu sp, sp, 0x38
lw t9, -sym.imp.snd_pcm_start(gp)
jalr t9
lw a0, (s0)
bltzl v0, 0xf400
sw zero, (s2)
addiu v0, zero, 1
sb v0, 4(s1)
move v0, zero
b 0xf400
sw zero, (s2)
lw t9, -sym.imp.snd_output_printf(gp)
lw a3, 0x14(s5)
lw a0, 4(s0)
move a2, v0
jalr t9
addiu a1, a1, 0x2b00
lw gp, 0x10(sp)
b 0xf470
sb zero, 4(s1)
nop
nop
nop
move t0, a2
move t1, a0
bnez a3, 0xf6e8
move v0, a1
sltu v1, a1, a2
beqz v1, 0xf608
clz v1, a2
beql v1, zero, 0xf550
srl a1, t0, 0x10
[*] Function printf used 51 times axfer
