[*] Binary protection state of libupnp

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function fprintf tear down of libupnp

    ; assembly                           | /* r2dec pseudo code output */
                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/libupnp @ 0xdd0 */
                                         | #include <stdint.h>
                                         |  
    ; (fcn) main ()                      | int32_t main () {
                                         |     /* [13] -r-x section size 3248 named .text */
    0x00000dd0 lui gp, 2                 |     
    0x00000dd4 addiu gp, gp, -0x6d40     |     
    0x00000dd8 addu gp, gp, t9           |     gp += t9;
    0x00000ddc addiu sp, sp, -0xa8       |     
    0x00000de0 lw v0, -0x7fd4(gp)        |     v0 = *((gp - 8181));
    0x00000de4 sw s7, 0x9c(sp)           |     *(var_9ch) = s7;
    0x00000de8 lw s7, -0x7f38(gp)        |     s7 = *((gp - 8142));
    0x00000dec sw fp, 0xa0(sp)           |     *(var_a0h) = fp;
                                         |     /* esilref: 'ip' */
    0x00000df0 addiu v0, v0, 0x2010      |     v0 += 0x2010;
    0x00000df4 lw v1, (s7)               |     v1 = *(s7);
    0x00000df8 addiu fp, sp, 0x2c        |     fp = sp + 0x2c;
    0x00000dfc sw s4, 0x90(sp)           |     *(var_90h) = s4;
    0x00000e00 sw s3, 0x8c(sp)           |     *(var_8ch) = s3;
    0x00000e04 sw gp, 0x18(sp)           |     *(var_18h) = gp;
    0x00000e08 sw v1, 0x7c(sp)           |     *(var_7ch) = v1;
    0x00000e0c sw ra, 0xa4(sp)           |     *(var_a4h) = ra;
    0x00000e10 sw s6, 0x98(sp)           |     *(var_98h) = s6;
    0x00000e14 sw s5, 0x94(sp)           |     *(var_94h) = s5;
    0x00000e18 sw s2, 0x88(sp)           |     *(var_88h) = s2;
    0x00000e1c sw s1, 0x84(sp)           |     *(var_84h) = s1;
    0x00000e20 sw s0, 0x80(sp)           |     *(var_80h) = s0;
    0x00000e24 move s3, a0               |     s3 = a0;
    0x00000e28 move s4, a1               |     s4 = a1;
    0x00000e2c move v1, fp               |     v1 = fp;
    0x00000e30 addiu t1, v0, 0x50        |     t1 = v0 + 0x50;
                                         |     do {
    0x00000e34 lw a3, (v0)               |         a3 = *(v0);
    0x00000e38 lw a2, 4(v0)              |         a2 = *((v0 + 1));
    0x00000e3c lw a1, 8(v0)              |         a1 = *((v0 + 2));
    0x00000e40 lw a0, 0xc(v0)            |         a0 = *((v0 + 3));
    0x00000e44 addiu v0, v0, 0x10        |         v0 += 0x10;
    0x00000e48 sw a3, (v1)               |         *(v1) = a3;
    0x00000e4c sw a2, 4(v1)              |         *((v1 + 1)) = a2;
    0x00000e50 sw a1, 8(v1)              |         *((v1 + 2)) = a1;
    0x00000e54 sw a0, 0xc(v1)            |         *((v1 + 3)) = a0;
    0x00000e58 addiu v1, v1, 0x10        |         v1 += 0x10;
    0x00000e5c bne v0, t1, 0xe34         |         
                                         |     } while (v0 != t1);
    0x00000e60 lw v0, -0x7f44(gp)        |     v0 = *((gp - 8145));
    0x00000e64 addiu v1, zero, 1         |     v1 = 1;
    0x00000e68 lw s1, -0x7fd8(gp)        |     s1 = *((gp - 8182));
    0x00000e6c sw v1, (v0)               |     *(v0) = v1;
    0x00000e70 lw s6, -0x7fd8(gp)        |     s6 = *((gp - 8182));
    0x00000e74 lw v0, -0x7f2c(gp)        |     v0 = *((gp - 8139));
    0x00000e78 lw s0, -0x7fdc(gp)        |     s0 = *(gp);
    0x00000e7c lw s5, -0x7f9c(gp)        |     s5 = *((gp - 8167));
    0x00000e80 sw zero, 0x28(sp)         |     *(var_28h) = 0;
    0x00000e84 addiu s2, sp, 0x28        |     s2 = sp + 0x28;
    0x00000e88 addiu s1, s1, 0x1d50      |     s1 += str.i:l:p:t:;
    0x00000e8c sw v0, 0x24(sp)           |     *(var_24h) = v0;
    0x00000e90 addiu s6, s6, 0x1d38      |     s6 += str.Unknown_option...__c_n;
                                         |     do {
                                         | label_0:
    0x00000e94 lw t9, -0x7f68(gp)        |         t9 = sym.imp.getopt_long;
    0x00000e98 sw s2, 0x10(sp)           |         *(var_10h) = s2;
    0x00000e9c move a3, fp               |         a3 = fp;
    0x00000ea0 move a2, s1               |         a2 = s1;
    0x00000ea4 move a1, s4               |         a1 = s4;
    0x00000ea8 move a0, s3               |         a0 = s3;
    0x00000eac jalr t9                   |         t9 ();
    0x00000eb0 addiu v1, zero, -1        |         v1 = -1;
    0x00000eb4 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 == v1) {
    0x00000eb8 beq v0, v1, 0xf64         |             goto label_12;
                                         |         }
    0x00000ebc addiu v1, zero, 0x6c      |         v1 = 0x6c;
    0x00000ec0 slti v1, v0, 0x6d         |         v1 = (v0 < 0x6d) ? 1 : 0;
                                         |         if (v0 == v1) {
    0x00000ec4 beq v0, v1, 0xf14         |             goto label_13;
                                         |         }
    0x00000ec8 addiu v1, zero, 0x70      |         v1 = 0x70;
                                         |         if (v1 != 0) {
    0x00000ecc bnez v1, 0xefc            |             goto label_14;
                                         |         }
    0x00000ed0 addiu v1, zero, 0x74      |         v1 = 0x74;
                                         |         if (v0 == v1) {
    0x00000ed4 beq v0, v1, 0xf44         |             goto label_15;
                                         |         }
    0x00000ed8 lw t9, -0x7fa0(gp)        |         t9 = sym.imp.strtol;
                                         |         if (v0 != v1) {
    0x00000edc bne v0, v1, 0xf20         |             goto label_16;
                                         |         }
    0x00000ee0 lw a0, (s5)               |         a0 = *(s5);
    0x00000ee4 addiu a2, zero, 0xa       |         a2 = 0xa;
    0x00000ee8 move a1, zero             |         a1 = 0;
    0x00000eec jalr t9                   |         t9 ();
    0x00000ef0 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00000ef4 sw v0, 0x10(s0)           |         *((s0 + 4)) = v0;
    0x00000ef8 b 0xe94                   |         
                                         |     } while (1);
                                         | label_14:
    0x00000efc addiu v1, zero, 0x69      |     v1 = 0x69;
    0x00000f00 lw v1, 0x24(sp)           |     v1 = *(var_24h);
                                         |     if (v0 == v1) {
    0x00000f04 bne v0, v1, 0xf24         |         
    0x00000f08 lw v0, (s5)               |         v0 = *(s5);
    0x00000f0c sw v0, 4(s0)              |         *((s0 + 1)) = v0;
    0x00000f10 b 0xe94                   |         goto label_0;
                                         | label_13:
    0x00000f14 lw v0, (s5)               |         v0 = *(s5);
    0x00000f18 sw v0, 0xc(s0)            |         *((s0 + 3)) = v0;
    0x00000f1c b 0xe94                   |         goto label_0;
                                         | label_16:
    0x00000f20 lw v1, 0x24(sp)           |         v1 = *(var_24h);
                                         |     }
    0x00000f24 lw t9, -0x7f90(gp)        |     t9 = sym.imp.__fprintf_chk
    0x00000f28 move a3, v0               |     a3 = v0;
    0x00000f2c lw a0, (v1)               |     a0 = *(v1);
    0x00000f30 move a2, s6               |     a2 = s6;
    0x00000f34 addiu a1, zero, 1         |     a1 = 1;
    0x00000f38 jalr t9                   |     t9 ();
    0x00000f3c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000f40 b 0xe94                   |     goto label_0;
                                         | label_15:
    0x00000f44 lw t9, -0x7fa0(gp)        |     t9 = sym.imp.strtol;
    0x00000f48 lw a0, (s5)               |     a0 = *(s5);
    0x00000f4c addiu a2, zero, 0xa       |     a2 = 0xa;
    0x00000f50 move a1, zero             |     a1 = 0;
    0x00000f54 jalr t9                   |     t9 ();
    0x00000f58 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000f5c sw v0, 8(s0)              |     *((s0 + 2)) = v0;
    0x00000f60 b 0xe94                   |     goto label_0;
                                         | label_12:
    0x00000f64 lw a0, -0x7fd8(gp)        |     a0 = *((gp - 8182));
    0x00000f68 lw t9, -0x7f84(gp)        |     t9 = sym.imp.openlog;
    0x00000f6c addiu a2, zero, 8         |     a2 = 8;
    0x00000f70 addiu a1, zero, 3         |     a1 = 3;
    0x00000f74 lw s1, -0x7fd8(gp)        |     s1 = *((gp - 8182));
    0x00000f78 addiu a0, a0, 0x1d5c      |     a0 += str.libupnp;
    0x00000f7c jalr t9                   |     t9 ();
    0x00000f80 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000f84 addiu a1, s1, 0x1590      |     a1 = s1 + 0x1590;
    0x00000f88 lw t9, -0x7f3c(gp)        |     t9 = sym.imp.signal;
    0x00000f8c addiu a0, zero, 1         |     a0 = 1;
    0x00000f90 jalr t9                   |     t9 ();
    0x00000f94 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000f98 addiu a1, s1, 0x1590      |     a1 = s1 + 0x1590;
    0x00000f9c lw t9, -0x7f3c(gp)        |     t9 = sym.imp.signal;
    0x00000fa0 addiu a0, zero, 0xf       |     a0 = 0xf;
    0x00000fa4 jalr t9                   |     t9 ();
    0x00000fa8 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000fac addiu a1, s1, 0x1590      |     a1 = s1 + 0x1590;
    0x00000fb0 lw t9, -0x7f3c(gp)        |     t9 = sym.imp.signal;
    0x00000fb4 addiu a0, zero, 2         |     a0 = 2;
    0x00000fb8 jalr t9                   |     t9 ();
    0x00000fbc lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000fc0 addiu a0, zero, 0xe       |     a0 = 0xe;
    0x00000fc4 lw t9, -0x7f3c(gp)        |     t9 = sym.imp.signal;
    0x00000fc8 addiu a1, s1, 0x1590      |     a1 = s1 + 0x1590;
    0x00000fcc jalr t9                   |     t9 ();
    0x00000fd0 lw a0, 0xc(s0)            |     a0 = *((s0 + 3));
    0x00000fd4 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (a0 == 0) {
    0x00000fd8 beqz a0, 0x1250           |         goto label_17;
                                         |     }
                                         | label_4:
    0x00000fdc lw t9, -0x7fd8(gp)        |     t9 = *((gp - 8182));
    0x00000fe0 addiu t9, t9, 0x1760      |     t9 += fcn.00001760;
    0x00000fe4 bal 0x1760                |     fcn_00001760 ();
    0x00000fe8 nop                       |     
    0x00000fec lw v0, 0x18(s0)           |     v0 = *((s0 + 6));
    0x00000ff0 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000ff4 bnez v0, 0x1174           |         goto label_18;
                                         |     }
    0x00000ff8 lw v0, 0x10(s0)           |     v0 = *((s0 + 4));
    0x00000ffc addiu v0, zero, 0x78      |     v0 = 0x78;
                                         |     if (v0 == 0) {
    0x00001000 beqz v0, 0x1248           |         goto label_19;
                                         |     }
                                         | label_3:
    0x00001004 lw t9, -0x7f48(gp)        |     t9 = sym.imp.alarm;
    0x00001008 lw s1, -0x7fd4(gp)        |     s1 = *((gp - 8181));
    0x0000100c lw a0, 0x10(s0)           |     a0 = *((s0 + 4));
    0x00001010 jalr t9                   |     t9 ();
    0x00001014 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001018 lui s2, 0x6666            |     s2 = 0x66666667;
    0x0000101c addiu s2, s2, 0x6667      |     
    0x00001020 lw s4, -0x7fd8(gp)        |     s4 = *((gp - 8182));
    0x00001024 addiu s4, s4, 0x1d84      |     s4 += str.UPnP_init_status_d__retrying...;
                                         | label_1:
    0x00001028 lw t9, -0x7f58(gp)        |     t9 = sym.imp.UpnpInit2;
    0x0000102c lhu a1, 8(s0)             |     a1 = *((s0 + 4));
    0x00001030 lw a0, 4(s0)              |     a0 = *((s0 + 1));
    0x00001034 jalr t9                   |     t9 ();
    0x00001038 move s3, v0               |     s3 = v0;
    0x0000103c lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00001040 bnez v0, 0x1124           |         goto label_20;
                                         |     }
    0x00001044 lw t9, -0x7f98(gp)        |     t9 = sym.imp.UpnpGetServerIpAddress;
    0x00001048 lw s1, -0x7fd4(gp)        |     s1 = *((gp - 8181));
    0x0000104c jalr t9                   |     t9 ();
    0x00001050 nop                       |     
    0x00001054 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001058 lw t9, -0x7f7c(gp)        |     t9 = sym.imp.UpnpGetServerPort;
    0x0000105c move s2, v0               |     s2 = v0;
    0x00001060 jalr t9                   |     t9 ();
    0x00001064 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001068 sw v0, 0x10(sp)           |     *(var_10h) = v0;
    0x0000106c move a3, s2               |     a3 = s2;
    0x00001070 lw a2, -0x7fd8(gp)        |     a2 = *((gp - 8182));
    0x00001074 lw t9, -0x7f80(gp)        |     t9 = sym.imp.__syslog_chk;
    0x00001078 addiu a2, a2, 0x1d64      |     a2 += str.UPnP_Initialized__s:_d_;
    0x0000107c addiu a1, zero, 1         |     a1 = 1;
    0x00001080 addiu a0, zero, 6         |     a0 = 6;
    0x00001084 jalr t9                   |     t9 ();
    0x00001088 lw v0, 0x21a8(s1)         |     v0 = *((s1 + 2154));
    0x0000108c lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 <= 0) {
    0x00001090 blez v0, 0x1260           |         goto label_7;
                                         |     }
    0x00001094 lw s2, -0x7fd4(gp)        |     s2 = *((gp - 8181));
    0x00001098 move s5, zero             |     s5 = 0;
    0x0000109c b 0x10b4                  |     
                                         |     while (s4 == 0) {
    0x000010a0 lw v0, 0x21a8(s1)         |         v0 = *((s1 + 2154));
    0x000010a4 addiu s5, s5, 1           |         s5++;
    0x000010a8 slt v1, s5, v0            |         v1 = (s5 < v0) ? 1 : 0;
                                         |         if (v1 == 0) {
    0x000010ac beqz v1, 0x1350           |             goto label_21;
                                         |         }
    0x000010b0 nop                       |         
    0x000010b4 lw v0, 0x21ac(s2)         |         v0 = *((s2 + 2155));
    0x000010b8 sll v1, s5, 2             |         v1 = s5 << 2;
    0x000010bc lwx v0, v1(v0)            |         __asm ("lwx v0, v1(v0)");
    0x000010c0 lw t9, 4(v0)              |         t9 = *((v0 + 1));
    0x000010c4 jalr t9                   |         t9 ();
    0x000010c8 nop                       |         
    0x000010cc lw s4, 0x18(s0)           |         s4 = *((s0 + 6));
    0x000010d0 lw v0, 0x20(s0)           |         v0 = *((s0 + 8));
    0x000010d4 or s4, s4, v0             |         s4 |= v0;
    0x000010d8 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000010dc beqz s4, 0x10a0           |         
                                         |     }
                                         | label_11:
    0x000010e0 lw v0, 0x21a8(s1)         |     v0 = *((s1 + 2154));
                                         |     if (v0 <= 0) {
                                         | label_9:
    0x000010e4 blezl v0, 0x111c          |         goto label_22;
                                         |     }
    0x000010e8 lw s3, 0x20(s0)           |     s3 = *((s0 + 8));
    0x000010ec lw s2, -0x7fd4(gp)        |     s2 = *((gp - 8181));
                                         |     do {
    0x000010f0 lw v0, 0x21ac(s2)         |         v0 = *((s2 + 2155));
    0x000010f4 sll v1, s3, 2             |         v1 = s3 << 2;
    0x000010f8 lwx v0, v1(v0)            |         __asm ("lwx v0, v1(v0)");
    0x000010fc lw t9, 0xc(v0)            |         t9 = *((v0 + 3));
    0x00001100 addiu s3, s3, 1           |         s3++;
    0x00001104 jalr t9                   |         t9 ();
    0x00001108 lw v0, 0x21a8(s1)         |         v0 = *((s1 + 2154));
    0x0000110c slt v0, s3, v0            |         v0 = (s3 < v0) ? 1 : 0;
    0x00001110 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001114 bnez v0, 0x10f0           |         
                                         |     } while (v0 != 0);
    0x00001118 lw s3, 0x20(s0)           |     s3 = *((s0 + 8));
                                         | label_22:
    0x0000111c sltu s3, zero, s3         |     s3 = (0 < s3) ? 1 : 0;
    0x00001120 b 0x117c                  |     goto label_23;
                                         | label_20:
    0x00001124 lw v0, 0x18(s0)           |     v0 = *((s0 + 6));
    0x00001128 lw a0, 0x21a0(s1)         |     a0 = *((s1 + 2152));
                                         |     if (v0 != 0) {
    0x0000112c bnez v0, 0x1174           |         goto label_18;
                                         |     }
    0x00001130 mult a0, s2               |     __asm ("mult a0, s2");
    0x00001134 mfhi v0                   |     __asm ("mfhi v0");
    0x00001138 sra v1, a0, 0x1f          |     v1 = a0 >> 0x1f;
    0x0000113c sra v0, v0, 2             |     v0 >>= 2;
    0x00001140 subu v0, v0, v1           |     __asm ("subu v0, v0, v1");
    0x00001144 sll v1, v0, 2             |     v1 = v0 << 2;
    0x00001148 addu v0, v1, v0           |     v0 = v1 + v0;
    0x0000114c sll v0, v0, 1             |     v0 <<= 1;
    0x00001150 addiu v1, a0, 1           |     v1 = a0 + 1;
    0x00001154 sw v1, 0x21a0(s1)         |     *((s1 + 2152)) = v1;
                                         |     if (a0 == v0) {
    0x00001158 beq a0, v0, 0x1228        |         goto label_24;
                                         |     }
                                         | label_2:
    0x0000115c lw t9, -0x7f40(gp)        |     t9 = sym.imp.sleep;
    0x00001160 addiu a0, zero, 3         |     a0 = 3;
    0x00001164 jalr t9                   |     t9 ();
    0x00001168 lw v0, 0x18(s0)           |     v0 = *((s0 + 6));
    0x0000116c lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x00001170 beqz v0, 0x1028           |         goto label_1;
                                         |     }
                                         | label_18:
    0x00001174 lw s1, -0x7fd4(gp)        |     s1 = *((gp - 8181));
    0x00001178 move s3, zero             |     s3 = 0;
                                         | label_23:
    0x0000117c lw v0, 0x21a8(s1)         |     v0 = *((s1 + 2154));
    0x00001180 lw t9, -0x7f20(gp)        |     t9 = sym.imp.UpnpEnableWebserver;
                                         |     if (v0 <= 0) {
    0x00001184 blez v0, 0x11bc           |         goto label_25;
                                         |     }
    0x00001188 lw s2, -0x7fd4(gp)        |     s2 = *((gp - 8181));
    0x0000118c move s0, zero             |     s0 = 0;
                                         |     do {
    0x00001190 lw v0, 0x21ac(s2)         |         v0 = *((s2 + 2155));
    0x00001194 sll v1, s0, 2             |         v1 = s0 << 2;
    0x00001198 lwx v0, v1(v0)            |         __asm ("lwx v0, v1(v0)");
    0x0000119c lw t9, 0x10(v0)           |         t9 = *((v0 + 4));
    0x000011a0 addiu s0, s0, 1           |         s0++;
    0x000011a4 jalr t9                   |         t9 ();
    0x000011a8 lw v0, 0x21a8(s1)         |         v0 = *((s1 + 2154));
    0x000011ac slt v0, s0, v0            |         v0 = (s0 < v0) ? 1 : 0;
    0x000011b0 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000011b4 bnez v0, 0x1190           |         
                                         |     } while (v0 != 0);
    0x000011b8 lw t9, -0x7f20(gp)        |     t9 = sym.imp.UpnpEnableWebserver;
                                         | label_25:
    0x000011bc move a0, zero             |     a0 = 0;
    0x000011c0 jalr t9                   |     t9 ();
    0x000011c4 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000011c8 lw t9, -0x7f88(gp)        |     t9 = sym.imp.UpnpFinish;
    0x000011cc jalr t9                   |     t9 ();
    0x000011d0 nop                       |     
    0x000011d4 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000011d8 lw t9, -0x7f6c(gp)        |     t9 = sym.imp.closelog;
    0x000011dc jalr t9                   |     t9 ();
    0x000011e0 nop                       |     
    0x000011e4 lw a0, 0x7c(sp)           |     a0 = *(var_7ch);
    0x000011e8 lw v1, (s7)               |     v1 = *(s7);
    0x000011ec lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000011f0 move v0, s3               |     v0 = s3;
                                         |     if (a0 != v1) {
    0x000011f4 bne a0, v1, 0x1410        |         goto label_26;
                                         |     }
    0x000011f8 lw ra, 0xa4(sp)           |     ra = *(var_a4h);
    0x000011fc lw fp, 0xa0(sp)           |     fp = *(var_a0h);
    0x00001200 lw s7, 0x9c(sp)           |     s7 = *(var_9ch);
    0x00001204 lw s6, 0x98(sp)           |     s6 = *(var_98h);
    0x00001208 lw s5, 0x94(sp)           |     s5 = *(var_94h);
    0x0000120c lw s4, 0x90(sp)           |     s4 = *(var_90h);
    0x00001210 lw s3, 0x8c(sp)           |     s3 = *(var_8ch);
    0x00001214 lw s2, 0x88(sp)           |     s2 = *(var_88h);
    0x00001218 lw s1, 0x84(sp)           |     s1 = *(var_84h);
    0x0000121c lw s0, 0x80(sp)           |     s0 = *(var_80h);
    0x00001220 addiu sp, sp, 0xa8        |     
    0x00001224 jr ra                     |     return v0;
                                         | label_24:
    0x00001228 lw t9, -0x7f80(gp)        |     t9 = sym.imp.__syslog_chk;
    0x0000122c move a3, s3               |     a3 = s3;
    0x00001230 move a2, s4               |     a2 = s4;
    0x00001234 addiu a1, zero, 1         |     a1 = 1;
    0x00001238 addiu a0, zero, 6         |     a0 = 6;
    0x0000123c jalr t9                   |     t9 ();
    0x00001240 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001244 b 0x115c                  |     goto label_2;
                                         | label_19:
    0x00001248 sw v0, 0x10(s0)           |     *((s0 + 4)) = v0;
    0x0000124c b 0x1004                  |     goto label_3;
                                         | label_17:
    0x00001250 lw a0, -0x7fd8(gp)        |     a0 = *((gp - 8182));
    0x00001254 addiu a0, a0, 0x1d20      |     a0 += str._usr_lib_upnp_plugins;
    0x00001258 sw a0, 0xc(s0)            |     *((s0 + 3)) = a0;
    0x0000125c b 0xfdc                   |     goto label_4;
                                         | label_7:
    0x00001260 lw fp, -0x7fd8(gp)        |     fp = *((gp - 8182));
                                         | label_6:
    0x00001264 lw t9, -0x7f78(gp)        |     t9 = sym.imp.sd_notify;
    0x00001268 addiu a1, fp, 0x1d7c      |     a1 = fp + str.READY1;
    0x0000126c move a0, zero             |     a0 = 0;
    0x00001270 jalr t9                   |     t9 ();
    0x00001274 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001278 lw s5, -0x7fd8(gp)        |     s5 = *((gp - 8182));
    0x0000127c lw s6, -0x7fd8(gp)        |     s6 = *((gp - 8182));
    0x00001280 addiu v0, s5, 0x1dc8      |     v0 = s5 + str.RELOADING1;
    0x00001284 lw s4, -0x7fd4(gp)        |     s4 = *((gp - 8181));
    0x00001288 addiu s6, s6, 0x1db4      |     s6 += str.Reconfiguring...;
    0x0000128c sw v0, 0x24(sp)           |     *(var_24h) = v0;
                                         | label_5:
    0x00001290 lw v0, 0x18(s0)           |     v0 = *((s0 + 6));
                                         |     do {
    0x00001294 lw t9, -0x7f28(gp)        |         t9 = sym.imp.pause;
                                         |         if (v0 != 0) {
    0x00001298 bnez v0, 0x13f4           |             goto label_27;
                                         |         }
    0x0000129c jalr t9                   |         t9 ();
    0x000012a0 nop                       |         
    0x000012a4 lw s2, 0x18(s0)           |         s2 = *((s0 + 6));
    0x000012a8 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (s2 != 0) {
    0x000012ac bnez s2, 0x13f4           |             goto label_27;
                                         |         }
    0x000012b0 lw s5, 0x1c(s0)           |         s5 = *((s0 + 7));
    0x000012b4 lw t9, -0x7f48(gp)        |         t9 = sym.imp.alarm;
                                         |         if (s5 != 0) {
    0x000012b8 bnez s5, 0x13a4           |             goto label_28;
                                         |         }
    0x000012bc lw v0, 0x14(s0)           |         v0 = *((s0 + 5));
    0x000012c0 beql v0, zero, 0x1294     |         
                                         |     } while (v0 == 0);
    0x000012c4 lw v0, 0x18(s0)           |     v0 = *((s0 + 6));
    0x000012c8 lw t9, -0x7f80(gp)        |     t9 = sym.imp.__syslog_chk;
    0x000012cc move a2, s6               |     a2 = s6;
    0x000012d0 addiu a1, zero, 1         |     a1 = 1;
    0x000012d4 addiu a0, zero, 6         |     a0 = 6;
    0x000012d8 jalr t9                   |     t9 ();
    0x000012dc lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000012e0 lw a1, 0x24(sp)           |     a1 = *(var_24h);
    0x000012e4 move a0, zero             |     a0 = 0;
    0x000012e8 lw t9, -0x7f78(gp)        |     t9 = sym.imp.sd_notify;
    0x000012ec sw zero, 0x14(s0)         |     *((s0 + 5)) = 0;
    0x000012f0 jalr t9                   |     t9 ();
    0x000012f4 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000012f8 b 0x1328                  |     
                                         |     while (v0 != 0) {
    0x000012fc sll a0, s5, 2             |         a0 = s5 << 2;
    0x00001300 lwx v0, a0(v0)            |         __asm ("lwx v0, a0(v0)");
    0x00001304 lw t9, 0x18(v0)           |         t9 = *((v0 + 6));
    0x00001308 jalr t9                   |         t9 ();
    0x0000130c nop                       |         
    0x00001310 lw v0, 0x18(s0)           |         v0 = *((s0 + 6));
    0x00001314 lw a0, 0x20(s0)           |         a0 = *((s0 + 8));
    0x00001318 or v0, v0, a0             |         v0 |= a0;
    0x0000131c lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 != 0) {
    0x00001320 bnez v0, 0x13f4           |             goto label_27;
                                         |         }
    0x00001324 addiu s5, s5, 1           |         s5++;
    0x00001328 lw v0, 0x21a8(s1)         |         v0 = *((s1 + 2154));
    0x0000132c slt v0, s5, v0            |         v0 = (s5 < v0) ? 1 : 0;
    0x00001330 lw v0, 0x21ac(s4)         |         v0 = *((s4 + 2155));
    0x00001334 bnez v0, 0x12fc           |         
                                         |     }
    0x00001338 lw t9, -0x7f78(gp)        |     t9 = sym.imp.sd_notify;
    0x0000133c addiu a1, fp, 0x1d7c      |     a1 = fp + str.READY1;
    0x00001340 move a0, zero             |     a0 = 0;
    0x00001344 jalr t9                   |     t9 ();
    0x00001348 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000134c b 0x1290                  |     goto label_5;
                                         | label_21:
    0x00001350 lw v0, 0x21ac(s2)         |     v0 = *((s2 + 2155));
                                         |     if (v0 > 0) {
    0x00001354 bgtz v0, 0x1374           |         goto label_29;
                                         |     }
    0x00001358 lw fp, -0x7fd8(gp)        |     fp = *((gp - 8182));
    0x0000135c b 0x1264                  |     goto label_6;
                                         | label_8:
    0x00001360 lw v0, 0x21a8(s1)         |     v0 = *((s1 + 2154));
    0x00001364 addiu s4, s4, 1           |     s4++;
    0x00001368 slt v0, s4, v0            |     v0 = (s4 < v0) ? 1 : 0;
    0x0000136c lw v0, 0x21ac(s2)         |     v0 = *((s2 + 2155));
                                         |     if (v0 == 0) {
    0x00001370 beqz v0, 0x1260           |         goto label_7;
                                         |     }
                                         | label_29:
    0x00001374 sll v1, s4, 2             |     v1 = s4 << 2;
    0x00001378 lwx v0, v1(v0)            |     __asm ("lwx v0, v1(v0)");
    0x0000137c lw t9, 8(v0)              |     t9 = *((v0 + 2));
    0x00001380 jalr t9                   |     t9 ();
    0x00001384 nop                       |     
    0x00001388 lw v0, 0x18(s0)           |     v0 = *((s0 + 6));
    0x0000138c lw v1, 0x20(s0)           |     v1 = *((s0 + 8));
    0x00001390 or v0, v0, v1             |     v0 |= v1;
    0x00001394 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x00001398 beqz v0, 0x1360           |         goto label_8;
                                         |     }
    0x0000139c lw v0, 0x21a8(s1)         |     v0 = *((s1 + 2154));
    0x000013a0 b 0x10e4                  |     goto label_9;
                                         | label_28:
    0x000013a4 lw a0, 0x10(s0)           |     a0 = *((s0 + 4));
    0x000013a8 sw zero, 0x1c(s0)         |     *((s0 + 7)) = 0;
    0x000013ac jalr t9                   |     t9 ();
    0x000013b0 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000013b4 b 0x13bc                  |     goto label_30;
                                         | label_10:
    0x000013b8 addiu s2, s2, 1           |     s2++;
                                         | label_30:
    0x000013bc lw v0, 0x21a8(s1)         |     v0 = *((s1 + 2154));
    0x000013c0 slt v0, s2, v0            |     v0 = (s2 < v0) ? 1 : 0;
    0x000013c4 lw v0, 0x21ac(s4)         |     v0 = *((s4 + 2155));
                                         |     if (v0 == 0) {
    0x000013c8 beqz v0, 0x1290           |         goto label_5;
                                         |     }
    0x000013cc sll v1, s2, 2             |     v1 = s2 << 2;
    0x000013d0 lwx v0, v1(v0)            |     __asm ("lwx v0, v1(v0)");
    0x000013d4 lw t9, 0x14(v0)           |     t9 = *((v0 + 5));
    0x000013d8 jalr t9                   |     t9 ();
    0x000013dc nop                       |     
    0x000013e0 lw v0, 0x18(s0)           |     v0 = *((s0 + 6));
    0x000013e4 lw v1, 0x20(s0)           |     v1 = *((s0 + 8));
    0x000013e8 or v0, v0, v1             |     v0 |= v1;
    0x000013ec lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x000013f0 beqz v0, 0x13b8           |         goto label_10;
                                         |     }
                                         | label_27:
    0x000013f4 lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x000013f8 lw t9, -0x7f78(gp)        |     t9 = sym.imp.sd_notify;
    0x000013fc addiu a1, a1, 0x1da8      |     a1 += str.STOPPING1;
    0x00001400 move a0, zero             |     a0 = 0;
    0x00001404 jalr t9                   |     t9 ();
    0x00001408 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000140c b 0x10e0                  |     goto label_11;
                                         | label_26:
    0x00001410 lw t9, -0x7f50(gp)        |     t9 = sym.imp.__stack_chk_fail;
    0x00001414 jalr t9                   |     t9 ();
    0x00001418 nop                       |     
    0x0000141c nop                       |     
                                         | }

[*] Function fprintf used 2 times libupnp