[*] Binary protection state of getstatus.cgi

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function sprintf tear down of getstatus.cgi

    ; assembly                           | /* r2dec pseudo code output */
                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/getstatus.cgi @ 0x16e0 */
                                         | #include <stdint.h>
                                         |  
    ; (fcn) fcn.000016e0 ()              | void fcn_000016e0 () {
    0x000016e0 lui gp, 2                 |     
    0x000016e4 addiu gp, gp, -0x46d0     |     
    0x000016e8 addu gp, gp, t9           |     gp += t9;
    0x000016ec addiu sp, sp, -0x50       |     
    0x000016f0 sw s5, 0x44(sp)           |     *(var_44h) = s5;
    0x000016f4 lw s5, -0x7f44(gp)        |     s5 = *((gp - 8145));
    0x000016f8 sw gp, 0x10(sp)           |     *(var_10h) = gp;
    0x000016fc sw ra, 0x4c(sp)           |     *(var_4ch) = ra;
    0x00001700 lw v0, (s5)               |     v0 = *(s5);
    0x00001704 sw s6, 0x48(sp)           |     *(var_48h) = s6;
    0x00001708 sw s4, 0x40(sp)           |     *(var_40h) = s4;
    0x0000170c sw s3, 0x3c(sp)           |     *(var_3ch) = s3;
    0x00001710 sw s2, 0x38(sp)           |     *(var_38h) = s2;
    0x00001714 sw s1, 0x34(sp)           |     *(var_34h) = s1;
    0x00001718 sw s0, 0x30(sp)           |     *(var_30h) = s0;
    0x0000171c sw v0, 0x2c(sp)           |     *(var_2ch) = v0;
    0x00001720 lw s6, -0x7fdc(gp)        |     s6 = *((gp - 8183));
                                         |     if (a0 <= 0) {
    0x00001724 blez a0, 0x1784           |         goto label_0;
                                         |     }
    0x00001728 move s3, a0               |     s3 = a0;
    0x0000172c move s4, a1               |     s4 = a1;
    0x00001730 move s1, a2               |     s1 = a2;
    0x00001734 move s0, zero             |     s0 = 0;
    0x00001738 addiu s2, sp, 0x1c        |     s2 = sp + 0x1c;
    0x0000173c addiu s6, s6, 0x3504      |     s6 += 0x3504;
    0x00001740 b 0x174c                  |     
                                         |     while (v0 != 0) {
    0x00001744 addiu s1, s1, 4           |         s1 += 4;
                                         |         if (s0 == s3) {
    0x00001748 beq s0, s3, 0x1784        |             goto label_0;
                                         |         }
    0x0000174c lw t9, -0x7f7c(gp)        |         t9 = sym.imp.g_sprintf
    0x00001750 addiu s0, s0, 1           |         s0++;
    0x00001754 move a2, s0               |         a2 = s0;
    0x00001758 move a1, s6               |         a1 = s6;
    0x0000175c move a0, s2               |         a0 = s2;
    0x00001760 jalr t9                   |         t9 ();
    0x00001764 move t9, s4               |         t9 = s4;
    0x00001768 move a0, s2               |         a0 = s2;
    0x0000176c jalr t9                   |         t9 ();
    0x00001770 lw gp, 0x10(sp)           |         gp = *(var_10h);
    0x00001774 sw v0, (s1)               |         *(s1) = v0;
    0x00001778 bnez v0, 0x1744           |         
                                         |     }
    0x0000177c move v0, zero             |     v0 = 0;
    0x00001780 b 0x1788                  |     goto label_1;
                                         | label_0:
    0x00001784 addiu v0, zero, 1         |     v0 = 1;
                                         | label_1:
    0x00001788 lw a0, 0x2c(sp)           |     a0 = *(var_2ch);
    0x0000178c lw v1, (s5)               |     v1 = *(s5);
    0x00001790 lw ra, 0x4c(sp)           |     ra = *(var_4ch);
                                         |     if (a0 == v1) {
    0x00001794 bne a0, v1, 0x17bc        |         
    0x00001798 lw s6, 0x48(sp)           |         s6 = *(var_48h);
    0x0000179c lw s5, 0x44(sp)           |         s5 = *(var_44h);
    0x000017a0 lw s4, 0x40(sp)           |         s4 = *(var_40h);
    0x000017a4 lw s3, 0x3c(sp)           |         s3 = *(var_3ch);
    0x000017a8 lw s2, 0x38(sp)           |         s2 = *(var_38h);
    0x000017ac lw s1, 0x34(sp)           |         s1 = *(var_34h);
    0x000017b0 lw s0, 0x30(sp)           |         s0 = *(var_30h);
    0x000017b4 addiu sp, sp, 0x50        |         
    0x000017b8 jr ra                     |         return v1;
                                         |     }
    0x000017bc lw t9, -0x7f5c(gp)        |     t9 = sym.imp.__stack_chk_fail;
    0x000017c0 jalr t9                   |     t9 ();
    0x000017c4 nop                       |     
    0x000017c8 nop                       |     
    0x000017cc nop                       |     
                                         | }
    ; assembly                           | /* r2dec pseudo code output */
                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/zipstream/getstatus.cgi @ 0xe50 */
                                         | #include <stdint.h>
                                         |  
    ; (fcn) main ()                      | int32_t main () {
                                         |     /* [13] -r-x section size 9376 named .text */
    0x00000e50 lui gp, 2                 |     
    0x00000e54 addiu gp, gp, -0x3e40     |     
    0x00000e58 addu gp, gp, t9           |     gp += t9;
    0x00000e5c addiu sp, sp, -0x70       |     
    0x00000e60 lw t9, -0x7f18(gp)        |     t9 = sym.imp.CGI_save_env;
    0x00000e64 sw s2, 0x50(sp)           |     *(var_50h) = s2;
    0x00000e68 lw s2, -0x7f44(gp)        |     s2 = *((gp - 8145));
    0x00000e6c sw gp, 0x18(sp)           |     *(var_18h) = gp;
    0x00000e70 sw ra, 0x6c(sp)           |     *(var_6ch) = ra;
    0x00000e74 lw v0, (s2)               |     v0 = *(s2);
    0x00000e78 sw fp, 0x68(sp)           |     *(var_68h) = fp;
    0x00000e7c sw s7, 0x64(sp)           |     *(var_64h) = s7;
    0x00000e80 sw s6, 0x60(sp)           |     *(var_60h) = s6;
    0x00000e84 sw s5, 0x5c(sp)           |     *(var_5ch) = s5;
    0x00000e88 sw s4, 0x58(sp)           |     *(var_58h) = s4;
    0x00000e8c sw s3, 0x54(sp)           |     *(var_54h) = s3;
    0x00000e90 sw s1, 0x4c(sp)           |     *(var_4ch) = s1;
    0x00000e94 sw s0, 0x48(sp)           |     *(var_48h) = s0;
    0x00000e98 sw v0, 0x44(sp)           |     *(var_44h) = v0;
    0x00000e9c jalr t9                   |     t9 ();
    0x00000ea0 nop                       |     
    0x00000ea4 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000ea8 bnez v0, 0x148c           |         goto label_4;
                                         |     }
    0x00000eac lw t9, -0x7f6c(gp)        |     t9 = sym.imp.CGI_get_query;
    0x00000eb0 move s1, v0               |     s1 = v0;
    0x00000eb4 jalr t9                   |     t9 ();
    0x00000eb8 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x00000ebc beqz v0, 0x148c           |         goto label_4;
                                         |     }
    0x00000ec0 lw a0, -0x7fdc(gp)        |     a0 = *((gp - 8183));
    0x00000ec4 lw t9, -0x7f60(gp)        |     t9 = sym.imp.CGI_get_value;
    0x00000ec8 addiu a0, a0, 0x3508      |     a0 += str.schemaversion;
    0x00000ecc jalr t9                   |     t9 ();
    0x00000ed0 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000ed4 beqz v0, 0xeec            |         
    0x00000ed8 lw t9, -0x7fd8(gp)        |         t9 = sym.check_schema_ver;
    0x00000edc move a0, v0               |         a0 = v0;
    0x00000ee0 bal 0x18f0                |         sym_check_schema_ver ();
    0x00000ee4 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 == 0) {
    0x00000ee8 beqz v0, 0x12e0           |             goto label_5;
                                         |         }
                                         |     }
    0x00000eec lw a0, -0x7fdc(gp)        |     a0 = *((gp - 8183));
    0x00000ef0 lw t9, -0x7f60(gp)        |     t9 = sym.imp.CGI_get_value;
    0x00000ef4 addiu a0, a0, 0x3518      |     a0 += str.camera;
    0x00000ef8 jalr t9                   |     t9 ();
    0x00000efc move s0, v0               |     s0 = v0;
    0x00000f00 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x00000f04 beqz v0, 0x108c           |         goto label_6;
                                         |     }
    0x00000f08 lw t9, -0x7fd4(gp)        |     t9 = sym.check_camera;
    0x00000f0c move a0, v0               |     a0 = v0;
    0x00000f10 bal 0x2244                |     sym_check_camera ();
    0x00000f14 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000f18 bnez v0, 0xf7c            |         goto label_7;
                                         |     }
    0x00000f1c lw t9, -0x7fd0(gp)        |     t9 = sym.send_xml_error;
    0x00000f20 addiu a0, zero, 0x14      |     a0 = 0x14;
    0x00000f24 bal 0x1964                |     sym_send_xml_error ();
    0x00000f28 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     do {
                                         | label_0:
    0x00000f2c lw t9, -0x7f58(gp)        |         t9 = sym.imp.CGI_cleanup;
    0x00000f30 jalr t9                   |         t9 ();
    0x00000f34 nop                       |         
    0x00000f38 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         | label_3:
    0x00000f3c lw a0, 0x44(sp)           |         a0 = *(var_44h);
    0x00000f40 lw v1, (s2)               |         v1 = *(s2);
    0x00000f44 move v0, s1               |         v0 = s1;
                                         |         if (a0 != v1) {
    0x00000f48 bne a0, v1, 0x1560        |             goto label_8;
                                         |         }
    0x00000f4c lw ra, 0x6c(sp)           |         ra = *(var_6ch);
    0x00000f50 lw fp, 0x68(sp)           |         fp = *(var_68h);
    0x00000f54 lw s7, 0x64(sp)           |         s7 = *(var_64h);
    0x00000f58 lw s6, 0x60(sp)           |         s6 = *(var_60h);
    0x00000f5c lw s5, 0x5c(sp)           |         s5 = *(var_5ch);
    0x00000f60 lw s4, 0x58(sp)           |         s4 = *(var_58h);
    0x00000f64 lw s3, 0x54(sp)           |         s3 = *(var_54h);
    0x00000f68 lw s2, 0x50(sp)           |         s2 = *(var_50h);
    0x00000f6c lw s1, 0x4c(sp)           |         s1 = *(var_4ch);
    0x00000f70 lw s0, 0x48(sp)           |         s0 = *(var_48h);
    0x00000f74 addiu sp, sp, 0x70        |         
    0x00000f78 jr ra                     |         return v0;
                                         | label_7:
    0x00000f7c lw t9, -0x7fcc(gp)        |         t9 = sym.ph_get_strength;
    0x00000f80 move a0, s0               |         a0 = s0;
    0x00000f84 bal 0x2df4                |         sym_ph_get_strength ();
    0x00000f88 move s3, v0               |         s3 = v0;
    0x00000f8c lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 == 0) {
    0x00000f90 beqz v0, 0x1324           |             goto label_9;
                                         |         }
    0x00000f94 lw t9, -0x7fc8(gp)        |         t9 = sym.ph_get_gop_mode;
    0x00000f98 move a0, s0               |         a0 = s0;
    0x00000f9c bal 0x2e18                |         sym_ph_get_gop_mode ();
    0x00000fa0 move s4, v0               |         s4 = v0;
    0x00000fa4 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 == 0) {
    0x00000fa8 beqz v0, 0x1380           |             goto label_10;
                                         |         }
    0x00000fac lw t9, -0x7fc4(gp)        |         t9 = sym.ph_get_max_gop;
    0x00000fb0 move a0, s0               |         a0 = s0;
    0x00000fb4 bal 0x2e3c                |         sym_ph_get_max_gop ();
    0x00000fb8 move s5, v0               |         s5 = v0;
    0x00000fbc lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 == 0) {
    0x00000fc0 beqz v0, 0x1438           |             goto label_11;
                                         |         }
    0x00000fc4 lw t9, -0x7fc0(gp)        |         t9 = sym.ph_get_fps_mode;
    0x00000fc8 move a0, s0               |         a0 = s0;
    0x00000fcc bal 0x2e60                |         sym_ph_get_fps_mode ();
    0x00000fd0 move s6, v0               |         s6 = v0;
    0x00000fd4 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 == 0) {
    0x00000fd8 beqz v0, 0x1494           |             goto label_12;
                                         |         }
    0x00000fdc lw t9, -0x7fbc(gp)        |         t9 = sym.ph_get_min_fps;
    0x00000fe0 move a0, s0               |         a0 = s0;
    0x00000fe4 bal 0x2e84                |         sym_ph_get_min_fps ();
    0x00000fe8 move s7, v0               |         s7 = v0;
    0x00000fec lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 == 0) {
    0x00000ff0 beqz v0, 0x14e4           |             goto label_13;
                                         |         }
    0x00000ff4 lw t9, -0x7fb8(gp)        |         t9 = sym.send_get_status_start;
    0x00000ff8 bal 0x1cc4                |         sym_send_get_status_start ();
    0x00000ffc nop                       |         
    0x00001000 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001004 move a3, s5               |         a3 = s5;
    0x00001008 move a2, s4               |         a2 = s4;
    0x0000100c lw t9, -0x7fb4(gp)        |         t9 = sym.send_get_status_channel;
    0x00001010 move a1, s3               |         a1 = s3;
    0x00001014 move a0, s0               |         a0 = s0;
    0x00001018 sw s7, 0x14(sp)           |         *(var_14h_2) = s7;
    0x0000101c sw s6, 0x10(sp)           |         *(var_10h_2) = s6;
    0x00001020 bal 0x1ba8                |         sym_send_get_status_channel ();
    0x00001024 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001028 lw t9, -0x7fb0(gp)        |         t9 = sym.send_get_status_end;
    0x0000102c bal 0x1d40                |         sym_send_get_status_end ();
    0x00001030 nop                       |         
    0x00001034 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         | label_1:
    0x00001038 lw t9, -0x7ef8(gp)        |         t9 = sym.imp.g_free;
    0x0000103c move a0, s3               |         a0 = s3;
    0x00001040 jalr t9                   |         t9 ();
    0x00001044 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001048 lw t9, -0x7ef8(gp)        |         t9 = sym.imp.g_free;
    0x0000104c move a0, s4               |         a0 = s4;
    0x00001050 jalr t9                   |         t9 ();
    0x00001054 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001058 lw t9, -0x7ef8(gp)        |         t9 = sym.imp.g_free;
    0x0000105c move a0, s5               |         a0 = s5;
    0x00001060 jalr t9                   |         t9 ();
    0x00001064 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001068 lw t9, -0x7ef8(gp)        |         t9 = sym.imp.g_free;
    0x0000106c move a0, s6               |         a0 = s6;
    0x00001070 jalr t9                   |         t9 ();
    0x00001074 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001078 lw t9, -0x7ef8(gp)        |         t9 = sym.imp.g_free;
    0x0000107c move a0, s7               |         a0 = s7;
    0x00001080 jalr t9                   |         t9 ();
    0x00001084 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00001088 b 0xf2c                   |         
                                         |     } while (1);
                                         | label_6:
    0x0000108c lw t9, -0x7fac(gp)        |     t9 = sym.ph_get_nbr_of_channels;
    0x00001090 bal 0x26f8                |     sym_ph_get_nbr_of_channels ();
    0x00001094 nop                       |     
    0x00001098 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000109c addiu s0, v0, 1           |     s0 = v0 + 1;
    0x000010a0 sll s0, s0, 2             |     s0 <<= 2;
    0x000010a4 lw t9, -0x7f70(gp)        |     t9 = sym.imp.g_malloc0;
    0x000010a8 move a0, s0               |     a0 = s0;
    0x000010ac move s3, v0               |     s3 = v0;
    0x000010b0 jalr t9                   |     t9 ();
    0x000010b4 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000010b8 move a0, s0               |     a0 = s0;
    0x000010bc lw t9, -0x7f70(gp)        |     t9 = sym.imp.g_malloc0;
    0x000010c0 move s4, v0               |     s4 = v0;
    0x000010c4 jalr t9                   |     t9 ();
    0x000010c8 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000010cc move a0, s0               |     a0 = s0;
    0x000010d0 lw t9, -0x7f70(gp)        |     t9 = sym.imp.g_malloc0;
    0x000010d4 move s5, v0               |     s5 = v0;
    0x000010d8 jalr t9                   |     t9 ();
    0x000010dc lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000010e0 move a0, s0               |     a0 = s0;
    0x000010e4 lw t9, -0x7f70(gp)        |     t9 = sym.imp.g_malloc0;
    0x000010e8 move s6, v0               |     s6 = v0;
    0x000010ec jalr t9                   |     t9 ();
    0x000010f0 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000010f4 move a0, s0               |     a0 = s0;
    0x000010f8 lw t9, -0x7f70(gp)        |     t9 = sym.imp.g_malloc0;
    0x000010fc move s0, v0               |     s0 = v0;
    0x00001100 jalr t9                   |     t9 ();
    0x00001104 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001108 move a2, s4               |     a2 = s4;
    0x0000110c move a0, s3               |     a0 = s3;
    0x00001110 lw fp, -0x7fdc(gp)        |     fp = *((gp - 8183));
    0x00001114 lw a1, -0x7fcc(gp)        |     a1 = sym.ph_get_strength;
    0x00001118 addiu fp, fp, 0x16e0      |     fp += fcn.000016e0;
    0x0000111c move t9, fp               |     t9 = fp;
    0x00001120 sw v0, 0x24(sp)           |     *(var_24h) = v0;
    0x00001124 bal 0x16e0                |     fcn_000016e0 ();
    0x00001128 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x0000112c beqz v0, 0x1244           |         goto label_14;
                                         |     }
    0x00001130 lw a1, -0x7fc8(gp)        |     a1 = sym.ph_get_gop_mode;
    0x00001134 move a2, s5               |     a2 = s5;
    0x00001138 move t9, fp               |     t9 = fp;
    0x0000113c move a0, s3               |     a0 = s3;
    0x00001140 bal 0x16e0                |     fcn_000016e0 ();
    0x00001144 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x00001148 beqz v0, 0x12f4           |         goto label_15;
                                         |     }
    0x0000114c lw a1, -0x7fc4(gp)        |     a1 = sym.ph_get_max_gop;
    0x00001150 move a2, s6               |     a2 = s6;
    0x00001154 move t9, fp               |     t9 = fp;
    0x00001158 move a0, s3               |     a0 = s3;
    0x0000115c bal 0x16e0                |     fcn_000016e0 ();
    0x00001160 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x00001164 beqz v0, 0x1408           |         goto label_16;
                                         |     }
    0x00001168 lw a1, -0x7fc0(gp)        |     a1 = sym.ph_get_fps_mode;
    0x0000116c move a2, s0               |     a2 = s0;
    0x00001170 move t9, fp               |     t9 = fp;
    0x00001174 move a0, s3               |     a0 = s3;
    0x00001178 bal 0x16e0                |     fcn_000016e0 ();
    0x0000117c lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x00001180 beqz v0, 0x13d8           |         goto label_17;
                                         |     }
    0x00001184 lw a1, -0x7fbc(gp)        |     a1 = sym.ph_get_min_fps;
    0x00001188 lw a2, 0x24(sp)           |     a2 = *(var_24h);
    0x0000118c move t9, fp               |     t9 = fp;
    0x00001190 move a0, s3               |     a0 = s3;
    0x00001194 bal 0x16e0                |     fcn_000016e0 ();
    0x00001198 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == 0) {
    0x0000119c beqz v0, 0x1530           |         goto label_18;
                                         |     }
    0x000011a0 lw t9, -0x7fb8(gp)        |     t9 = sym.send_get_status_start;
    0x000011a4 move t0, zero             |     t0 = 0;
    0x000011a8 sw t0, 0x28(sp)           |     *(var_28h) = t0;
    0x000011ac bal 0x1cc4                |     sym_send_get_status_start ();
    0x000011b0 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000011b4 move s7, zero             |     s7 = 0;
    0x000011b8 addiu fp, sp, 0x34        |     fp = sp + 0x34;
    0x000011bc lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x000011c0 lw t0, 0x28(sp)           |     t0 = *(var_28h);
    0x000011c4 addiu v0, v0, 0x3720      |     v0 += 0x3720;
    0x000011c8 sw v0, 0x2c(sp)           |     *(var_2ch) = v0;
    0x000011cc b 0x1224                  |     
                                         |     while (v0 != 0) {
    0x000011d0 lw t9, -0x7f7c(gp)        |         t9 = sym.imp.g_sprintf
    0x000011d4 lw a1, 0x2c(sp)           |         a1 = *(var_2ch);
    0x000011d8 move a2, t0               |         a2 = t0;
    0x000011dc sw t0, 0x28(sp)           |         *(var_28h) = t0;
    0x000011e0 move a0, fp               |         a0 = fp;
    0x000011e4 jalr t9                   |         t9 ();
    0x000011e8 lw v0, 0x24(sp)           |         v0 = *(var_24h);
    0x000011ec lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000011f0 lwx a3, s7(s6)            |         __asm ("lwx a3, s7(s6)");
    0x000011f4 lwx a0, s7(v0)            |         __asm ("lwx a0, s7(v0)");
    0x000011f8 lwx v0, s7(s0)            |         __asm ("lwx v0, s7(s0)");
    0x000011fc lwx a2, s7(s5)            |         __asm ("lwx a2, s7(s5)");
    0x00001200 lwx a1, s7(s4)            |         __asm ("lwx a1, s7(s4)");
    0x00001204 lw t9, -0x7fb4(gp)        |         t9 = sym.send_get_status_channel;
    0x00001208 sw a0, 0x14(sp)           |         *(var_14h_2) = a0;
    0x0000120c sw v0, 0x10(sp)           |         *(var_10h_2) = v0;
    0x00001210 move a0, fp               |         a0 = fp;
    0x00001214 bal 0x1ba8                |         sym_send_get_status_channel ();
    0x00001218 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x0000121c lw t0, 0x28(sp)           |         t0 = *(var_28h);
    0x00001220 addiu s7, s7, 4           |         s7 += 4;
    0x00001224 slt v0, t0, s3            |         v0 = (t0 < s3) ? 1 : 0;
    0x00001228 addiu t0, t0, 1           |         t0++;
    0x0000122c bnez v0, 0x11d0           |         
                                         |     }
    0x00001230 lw t9, -0x7fb0(gp)        |     t9 = sym.send_get_status_end;
    0x00001234 bal 0x1d40                |     sym_send_get_status_end ();
    0x00001238 nop                       |     
    0x0000123c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001240 b 0x128c                  |     goto label_19;
                                         | label_14:
    0x00001244 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x00001248 lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x0000124c lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x00001250 addiu v0, v0, 0x3730      |     v0 += str.send_all_status;
    0x00001254 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x00001258 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x0000125c addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x00001260 addiu a2, a2, 0x3530      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_Strength_n;
    0x00001264 addiu a1, zero, 1         |     a1 = 1;
    0x00001268 addiu a0, zero, 3         |     a0 = 3;
    0x0000126c addiu v0, zero, 0x8d      |     v0 = 0x8d;
                                         |     do {
                                         | label_2:
    0x00001270 sw v0, 0x10(sp)           |         *(var_10h_2) = v0;
    0x00001274 jalr t9                   |         t9 ();
    0x00001278 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x0000127c lw t9, -0x7fd0(gp)        |         t9 = sym.send_xml_error;
    0x00001280 addiu a0, zero, 0xa       |         a0 = 0xa;
    0x00001284 bal 0x1964                |         sym_send_xml_error ();
    0x00001288 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         | label_19:
    0x0000128c lw t9, -0x7f78(gp)        |         t9 = sym.imp.g_strfreev;
    0x00001290 move a0, s4               |         a0 = s4;
    0x00001294 jalr t9                   |         t9 ();
    0x00001298 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x0000129c lw t9, -0x7f78(gp)        |         t9 = sym.imp.g_strfreev;
    0x000012a0 move a0, s5               |         a0 = s5;
    0x000012a4 jalr t9                   |         t9 ();
    0x000012a8 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012ac lw t9, -0x7f78(gp)        |         t9 = sym.imp.g_strfreev;
    0x000012b0 move a0, s6               |         a0 = s6;
    0x000012b4 jalr t9                   |         t9 ();
    0x000012b8 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012bc lw t9, -0x7f78(gp)        |         t9 = sym.imp.g_strfreev;
    0x000012c0 move a0, s0               |         a0 = s0;
    0x000012c4 jalr t9                   |         t9 ();
    0x000012c8 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012cc lw t9, -0x7f78(gp)        |         t9 = sym.imp.g_strfreev;
    0x000012d0 lw a0, 0x24(sp)           |         a0 = *(var_24h);
    0x000012d4 jalr t9                   |         t9 ();
    0x000012d8 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012dc b 0xf2c                   |         goto label_0;
                                         | label_5:
    0x000012e0 lw t9, -0x7fd0(gp)        |         t9 = sym.send_xml_error;
    0x000012e4 addiu a0, zero, 0x28      |         a0 = 0x28;
    0x000012e8 bal 0x1964                |         sym_send_xml_error ();
    0x000012ec lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012f0 b 0xf2c                   |         goto label_0;
                                         | label_15:
    0x000012f4 lw v0, -0x7fdc(gp)        |         v0 = *((gp - 8183));
    0x000012f8 lw a3, -0x7fdc(gp)        |         a3 = *((gp - 8183));
    0x000012fc lw a2, -0x7fdc(gp)        |         a2 = *((gp - 8183));
    0x00001300 addiu v0, v0, 0x3730      |         v0 += str.send_all_status;
    0x00001304 sw v0, 0x14(sp)           |         *(var_14h_2) = v0;
    0x00001308 lw t9, -0x7f4c(gp)        |         t9 = sym.imp.__syslog_chk;
    0x0000130c addiu a3, a3, 0x3520      |         a3 += str.get_status.c;
    0x00001310 addiu a2, a2, 0x364c      |         a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_GopMode_n;
    0x00001314 addiu a1, zero, 1         |         a1 = 1;
    0x00001318 addiu a0, zero, 3         |         a0 = 3;
    0x0000131c addiu v0, zero, 0x92      |         v0 = 0x92;
    0x00001320 b 0x1270                  |         
                                         |     } while (1);
                                         | label_9:
    0x00001324 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x00001328 lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x0000132c lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x00001330 addiu v0, v0, 0x3740      |     v0 += str.send_camera_status;
    0x00001334 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x00001338 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x0000133c addiu v0, zero, 0x52      |     v0 = 0x52;
    0x00001340 addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x00001344 addiu a2, a2, 0x3530      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_Strength_n;
    0x00001348 addiu a1, zero, 1         |     a1 = 1;
    0x0000134c addiu a0, zero, 3         |     a0 = 3;
    0x00001350 sw v0, 0x10(sp)           |     *(var_10h_2) = v0;
    0x00001354 jalr t9                   |     t9 ();
    0x00001358 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000135c addiu a0, zero, 0xa       |     a0 = 0xa;
    0x00001360 move s7, zero             |     s7 = 0;
    0x00001364 lw t9, -0x7fd0(gp)        |     t9 = sym.send_xml_error;
    0x00001368 move s6, zero             |     s6 = 0;
    0x0000136c bal 0x1964                |     sym_send_xml_error ();
    0x00001370 move s5, zero             |     s5 = 0;
    0x00001374 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001378 move s4, zero             |     s4 = 0;
    0x0000137c b 0x1038                  |     goto label_1;
                                         | label_10:
    0x00001380 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x00001384 lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x00001388 lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x0000138c addiu v0, v0, 0x3740      |     v0 += str.send_camera_status;
    0x00001390 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x00001394 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x00001398 addiu v0, zero, 0x57      |     v0 = 0x57;
    0x0000139c addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x000013a0 addiu a2, a2, 0x3568      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_GOP_Mode_n;
    0x000013a4 addiu a1, zero, 1         |     a1 = 1;
    0x000013a8 addiu a0, zero, 3         |     a0 = 3;
    0x000013ac sw v0, 0x10(sp)           |     *(var_10h_2) = v0;
    0x000013b0 jalr t9                   |     t9 ();
    0x000013b4 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000013b8 addiu a0, zero, 0xa       |     a0 = 0xa;
    0x000013bc move s7, zero             |     s7 = 0;
    0x000013c0 lw t9, -0x7fd0(gp)        |     t9 = sym.send_xml_error;
    0x000013c4 move s6, zero             |     s6 = 0;
    0x000013c8 bal 0x1964                |     sym_send_xml_error ();
    0x000013cc move s5, zero             |     s5 = 0;
    0x000013d0 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000013d4 b 0x1038                  |     goto label_1;
                                         | label_17:
    0x000013d8 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x000013dc lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x000013e0 lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x000013e4 addiu v0, v0, 0x3730      |     v0 += str.send_all_status;
    0x000013e8 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x000013ec lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x000013f0 addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x000013f4 addiu a2, a2, 0x36b4      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_FpsMode_n;
    0x000013f8 addiu a1, zero, 1         |     a1 = 1;
    0x000013fc addiu a0, zero, 3         |     a0 = 3;
    0x00001400 addiu v0, zero, 0x9c      |     v0 = 0x9c;
    0x00001404 b 0x1270                  |     goto label_2;
                                         | label_16:
    0x00001408 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x0000140c lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x00001410 lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x00001414 addiu v0, v0, 0x3730      |     v0 += str.send_all_status;
    0x00001418 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x0000141c lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x00001420 addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x00001424 addiu a2, a2, 0x3680      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_max_Gop_n;
    0x00001428 addiu a1, zero, 1         |     a1 = 1;
    0x0000142c addiu a0, zero, 3         |     a0 = 3;
    0x00001430 addiu v0, zero, 0x97      |     v0 = 0x97;
    0x00001434 b 0x1270                  |     goto label_2;
                                         | label_11:
    0x00001438 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x0000143c lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x00001440 lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x00001444 addiu v0, v0, 0x3740      |     v0 += str.send_camera_status;
    0x00001448 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x0000144c sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x00001450 addiu v0, zero, 0x5c      |     v0 = 0x5c;
    0x00001454 addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x00001458 addiu a2, a2, 0x35a0      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_Max_GOP_Length_n;
    0x0000145c addiu a1, zero, 1         |     a1 = 1;
    0x00001460 addiu a0, zero, 3         |     a0 = 3;
    0x00001464 sw v0, 0x10(sp)           |     *(var_10h_2) = v0;
    0x00001468 jalr t9                   |     t9 ();
    0x0000146c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001470 addiu a0, zero, 0xa       |     a0 = 0xa;
    0x00001474 move s7, zero             |     s7 = 0;
    0x00001478 lw t9, -0x7fd0(gp)        |     t9 = sym.send_xml_error;
    0x0000147c move s6, zero             |     s6 = 0;
    0x00001480 bal 0x1964                |     sym_send_xml_error ();
    0x00001484 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001488 b 0x1038                  |     goto label_1;
                                         | label_4:
    0x0000148c addiu s1, zero, -1        |     s1 = -1;
    0x00001490 b 0xf3c                   |     goto label_3;
                                         | label_12:
    0x00001494 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x00001498 lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x0000149c lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x000014a0 addiu v0, v0, 0x3740      |     v0 += str.send_camera_status;
    0x000014a4 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x000014a8 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x000014ac addiu v0, zero, 0x61      |     v0 = 0x61;
    0x000014b0 addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x000014b4 addiu a2, a2, 0x35dc      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_FPS_Mode_n;
    0x000014b8 addiu a1, zero, 1         |     a1 = 1;
    0x000014bc addiu a0, zero, 3         |     a0 = 3;
    0x000014c0 sw v0, 0x10(sp)           |     *(var_10h_2) = v0;
    0x000014c4 jalr t9                   |     t9 ();
    0x000014c8 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000014cc addiu a0, zero, 0xa       |     a0 = 0xa;
    0x000014d0 lw t9, -0x7fd0(gp)        |     t9 = sym.send_xml_error;
    0x000014d4 move s7, zero             |     s7 = 0;
    0x000014d8 bal 0x1964                |     sym_send_xml_error ();
    0x000014dc lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000014e0 b 0x1038                  |     goto label_1;
                                         | label_13:
    0x000014e4 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x000014e8 lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x000014ec lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x000014f0 addiu v0, v0, 0x3740      |     v0 += str.send_camera_status;
    0x000014f4 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x000014f8 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x000014fc addiu v0, zero, 0x66      |     v0 = 0x66;
    0x00001500 addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x00001504 addiu a2, a2, 0x3614      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_Minimum_FPS_n;
    0x00001508 addiu a1, zero, 1         |     a1 = 1;
    0x0000150c addiu a0, zero, 3         |     a0 = 3;
    0x00001510 sw v0, 0x10(sp)           |     *(var_10h_2) = v0;
    0x00001514 jalr t9                   |     t9 ();
    0x00001518 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000151c lw t9, -0x7fd0(gp)        |     t9 = sym.send_xml_error;
    0x00001520 addiu a0, zero, 0xa       |     a0 = 0xa;
    0x00001524 bal 0x1964                |     sym_send_xml_error ();
    0x00001528 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000152c b 0x1038                  |     goto label_1;
                                         | label_18:
    0x00001530 lw v0, -0x7fdc(gp)        |     v0 = *((gp - 8183));
    0x00001534 lw a3, -0x7fdc(gp)        |     a3 = *((gp - 8183));
    0x00001538 lw a2, -0x7fdc(gp)        |     a2 = *((gp - 8183));
    0x0000153c addiu v0, v0, 0x3730      |     v0 += str.send_all_status;
    0x00001540 sw v0, 0x14(sp)           |     *(var_14h_2) = v0;
    0x00001544 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.__syslog_chk;
    0x00001548 addiu a3, a3, 0x3520      |     a3 += str.get_status.c;
    0x0000154c addiu a2, a2, 0x36e8      |     a2 += str.Error:__s__d__s__:_Unable_to_get_ZipStream_Minimum_Fps_n;
    0x00001550 addiu a1, zero, 1         |     a1 = 1;
    0x00001554 addiu a0, zero, 3         |     a0 = 3;
    0x00001558 addiu v0, zero, 0xa1      |     v0 = 0xa1;
    0x0000155c b 0x1270                  |     goto label_2;
                                         | label_8:
    0x00001560 lw t9, -0x7f5c(gp)        |     t9 = sym.imp.__stack_chk_fail;
    0x00001564 jalr t9                   |     t9 ();
    0x00001568 nop                       |     
    0x0000156c nop                       |     
                                         | }

[*] Function sprintf used 3 times getstatus.cgi