[*] Binary protection state of axfer
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of axfer
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/axfer @ 0x9218 */
| #include <stdint.h>
|
; (fcn) sym.xfer_context_post_process () | void xfer_context_post_process () {
0x00009218 lui gp, 2 |
0x0000921c addiu gp, gp, 0x2df8 |
0x00009220 addu gp, gp, t9 | gp += t9;
0x00009224 lw a3, -0x7fdc(gp) | a3 = sym.imp.snd_pcm_hw_params_set_access_mask;
| if (a0 != 0) {
0x00009228 beqz a0, 0x924c |
0x0000922c lw v0, 8(a0) | v0 = *((a0 + 2));
| if (v0 != 0) {
0x00009230 beqz v0, 0x9244 |
0x00009234 nop |
0x00009238 lw t9, 0x14(v0) | t9 = *((v0 + 5));
0x0000923c jr t9 | t9 ();
0x00009240 nop |
| }
0x00009244 jr ra | return v0;
0x00009248 nop |
| }
0x0000924c addiu sp, sp, -0x20 |
0x00009250 lw a1, -0x7fdc(gp) | a1 = sym.imp.snd_pcm_hw_params_set_access_mask;
0x00009254 lw a0, -0x7fdc(gp) | a0 = sym.imp.snd_pcm_hw_params_set_access_mask;
0x00009258 lw t9, -0x7cc0(gp) | t9 = sym.imp.__assert_fail;
| /* str.xfer_context_post_process */
0x0000925c addiu a3, a3, 0x1360 | a3 += 0x1360;
0x00009260 sw gp, 0x10(sp) | *(var_10h_5) = gp;
0x00009264 sw ra, 0x1c(sp) | *(var_1ch_5) = ra;
0x00009268 addiu a2, zero, 0xfd | a2 = 0xfd;
| /* str..._.._alsa_utils_1.1.9_axfer_xfer.c */
0x0000926c addiu a1, a1, 0x120c | a1 += 0x120c;
| /* str.xfer */
0x00009270 addiu a0, a0, 0x1230 | a0 += 0x1230;
0x00009274 jalr t9 | t9 ();
0x00009278 nop |
0x0000927c nop |
0x00009280 lui gp, 2 |
0x00009284 addiu gp, gp, 0x2d90 |
0x00009288 addu gp, gp, t9 | gp += t9;
0x0000928c addiu sp, sp, -0x38 |
0x00009290 sw s3, 0x30(sp) | *(var_30h_2) = s3;
0x00009294 sw s2, 0x2c(sp) | *(var_2ch_3) = s2;
0x00009298 sw s0, 0x24(sp) | *(var_24h_4) = s0;
0x0000929c sw gp, 0x10(sp) | *(var_10h_6) = gp;
0x000092a0 sw ra, 0x34(sp) | *(var_34h_2) = ra;
0x000092a4 sw s1, 0x28(sp) | *(var_28h_3) = s1;
0x000092a8 lb v0, (a3) | v0 = *(a3);
0x000092ac move s0, a3 | s0 = a3;
0x000092b0 move s3, a0 | s3 = a0;
0x000092b4 move s2, a1 | s2 = a1;
| if (v0 == 0) {
0x000092b8 beqz v0, 0x9348 | goto label_2;
| }
0x000092bc lw t9, -0x7d48(gp) | t9 = sym.imp.strlen;
0x000092c0 sw a2, 0x1c(sp) | *(var_1ch_6) = a2;
0x000092c4 move a0, a1 | a0 = a1;
0x000092c8 jalr t9 | t9 ();
0x000092cc lw gp, 0x10(sp) | gp = *(var_10h_6);
0x000092d0 move a0, s0 | a0 = s0;
0x000092d4 lw t9, -0x7d48(gp) | t9 = sym.imp.strlen;
0x000092d8 move s1, v0 | s1 = v0;
0x000092dc jalr t9 | t9 ();
0x000092e0 lw gp, 0x10(sp) | gp = *(var_10h_6);
0x000092e4 subu s1, s1, v0 | __asm ("subu s1, s1, v0");
0x000092e8 addu s1, s2, s1 | s1 = s2 + s1;
0x000092ec lw t9, -0x7e80(gp) | t9 = sym.imp.strcmp;
0x000092f0 move a1, s0 | a1 = s0;
0x000092f4 move a0, s1 | a0 = s1;
0x000092f8 jalr t9 | t9 ();
0x000092fc lw gp, 0x10(sp) | gp = *(var_10h_6);
0x00009300 lw a2, 0x1c(sp) | a2 = *(var_1ch_6);
| if (v0 == 0) {
0x00009304 beqz v0, 0x9338 | goto label_3;
| }
0x00009308 lw t9, -0x7fdc(gp) | t9 = sym.imp.snd_pcm_hw_params_set_access_mask;
| do {
0x0000930c lw ra, 0x34(sp) | ra = *(var_34h_2);
0x00009310 lw s1, 0x28(sp) | s1 = *(var_28h_3);
0x00009314 move a3, s0 | a3 = s0;
0x00009318 move a1, s2 | a1 = s2;
0x0000931c lw s0, 0x24(sp) | s0 = *(var_24h_4);
0x00009320 lw s2, 0x2c(sp) | s2 = *(var_2ch_3);
0x00009324 move a0, s3 | a0 = s3;
0x00009328 lw s3, 0x30(sp) | s3 = *(var_30h_2);
0x0000932c addiu t9, t9, -0x69b4 | t9 += -0x69b4;
0x00009330 addiu sp, sp, 0x38 |
0x00009334 b 0x964c | goto label_4;
| label_3:
0x00009338 sb zero, (s1) | *(s1) = 0;
0x0000933c lb v0, (s0) | v0 = *(s0);
0x00009340 lw t9, -0x7fdc(gp) | t9 = sym.imp.snd_pcm_hw_params_set_access_mask;
0x00009344 bnez v0, 0x930c |
| } while (v0 != 0);
| label_2:
0x00009348 lw t9, -0x7fdc(gp) | t9 = sym.imp.snd_pcm_hw_params_set_access_mask;
0x0000934c lw ra, 0x34(sp) | ra = *(var_34h_2);
0x00009350 lw s1, 0x28(sp) | s1 = *(var_28h_3);
0x00009354 move a3, s0 | a3 = s0;
0x00009358 move a1, s2 | a1 = s2;
0x0000935c lw s0, 0x24(sp) | s0 = *(var_24h_4);
0x00009360 lw s2, 0x2c(sp) | s2 = *(var_2ch_3);
0x00009364 move a0, s3 | a0 = s3;
0x00009368 lw s3, 0x30(sp) | s3 = *(var_30h_2);
0x0000936c addiu t9, t9, -0x6b18 | t9 += -0x6b18;
0x00009370 addiu sp, sp, 0x38 |
0x00009374 b 0x94e8 |
0x000094e8 lui gp, 2 |
0x000094ec addiu gp, gp, 0x2b28 |
0x000094f0 addu gp, gp, t9 | gp += t9;
0x000094f4 addiu sp, sp, -0x40 |
0x000094f8 lw t9, -0x7d48(gp) | t9 = sym.imp.strlen;
0x000094fc sw s2, 0x30(sp) | *(var_28h_3) = s2;
0x00009500 move s2, a0 | s2 = a0;
0x00009504 sw gp, 0x20(sp) | *(var_20h_3) = gp;
0x00009508 sw s4, 0x38(sp) | *(var_30h_2) = s4;
0x0000950c sw s3, 0x34(sp) | *(var_2ch_3) = s3;
0x00009510 sw s0, 0x28(sp) | *(var_28h_4) = s0;
0x00009514 move a0, a1 | a0 = a1;
0x00009518 sw ra, 0x3c(sp) | *(var_34h_2) = ra;
0x0000951c sw s1, 0x2c(sp) | *(var_24h_4) = s1;
0x00009520 move s3, a1 | s3 = a1;
0x00009524 move s4, a2 | s4 = a2;
0x00009528 jalr t9 | t9 ();
0x0000952c lw a0, 0x38(s2) | a0 = *((s2 + 14));
0x00009530 move s0, v0 | s0 = v0;
0x00009534 sltiu v0, a0, 2 | v0 = (a0 < 2) ? 1 : 0;
0x00009538 lw gp, 0x20(sp) | gp = *(var_20h_3);
| if (v0 == 0) {
0x0000953c beqz v0, 0x95c4 | goto label_5;
| }
0x00009540 addiu s0, s0, 1 | s0++;
| do {
0x00009544 lw s1, 0x34(s2) | s1 = *((s2 + 13));
0x00009548 lw t9, -0x7db0(gp) | t9 = sym.imp.malloc;
0x0000954c sll v0, s4, 2 | v0 = s4 << 2;
0x00009550 addu s1, s1, v0 | s1 += v0;
0x00009554 move a0, s0 | a0 = s0;
0x00009558 jalr t9 | t9 ();
0x0000955c lw gp, 0x20(sp) | gp = *(var_20h_3);
0x00009560 sw v0, (s1) | *(s1) = v0;
| if (v0 == 0) {
0x00009564 beqz v0, 0x9644 | goto label_6;
| }
0x00009568 lw a0, 0x38(s2) | a0 = *((s2 + 14));
0x0000956c addiu v1, zero, 1 | v1 = 1;
0x00009570 lw v1, -0x7fdc(gp) | v1 = sym.imp.snd_pcm_hw_params_set_access_mask;
| if (a0 == v1) {
0x00009574 beq a0, v1, 0x9604 | goto label_7;
| }
0x00009578 lw t9, -0x7e48(gp) | t9 = sym.imp.__snprintf_chk
| /* str._s__i */
0x0000957c addiu v1, v1, 0x140c | v1 += 0x140c;
0x00009580 sw s4, 0x18(sp) | *(var_10h_6) = s4;
0x00009584 sw s3, 0x14(sp) | *(var_14h) = s3;
0x00009588 sw v1, 0x10(sp) | *(var_10h_7) = v1;
0x0000958c addiu a3, zero, -1 | a3 = -1;
0x00009590 addiu a2, zero, 1 | a2 = 1;
0x00009594 move a1, s0 | a1 = s0;
0x00009598 move a0, v0 | a0 = v0;
0x0000959c jalr t9 | t9 ();
0x000095a0 move v0, zero | v0 = 0;
| label_0:
0x000095a4 lw ra, 0x3c(sp) | ra = *(var_34h_2);
0x000095a8 lw s4, 0x38(sp) | s4 = *(var_30h_2);
0x000095ac lw s3, 0x34(sp) | s3 = *(var_2ch_3);
0x000095b0 lw s2, 0x30(sp) | s2 = *(var_28h_3);
0x000095b4 lw s1, 0x2c(sp) | s1 = *(var_24h_4);
0x000095b8 lw s0, 0x28(sp) | s0 = *(var_28h_4);
0x000095bc addiu sp, sp, 0x40 |
0x000095c0 jr ra | return v0;
| label_5:
0x000095c4 lw t9, -0x7f6c(gp) | t9 = *(gp);
0x000095c8 addiu s0, s0, 3 | s0 += 3;
0x000095cc bal 0xf9e0 | fcn_0000f9e0 ();
0x000095d0 lw gp, 0x20(sp) | gp = *(var_20h_3);
0x000095d4 move a0, v0 | a0 = v0;
0x000095d8 lw t9, -0x7da4(gp) | t9 = sym.imp.log10;
0x000095dc move a1, v1 | a1 = v1;
0x000095e0 jalr t9 | t9 ();
0x000095e4 lw gp, 0x20(sp) | gp = *(var_20h_3);
0x000095e8 move a0, v0 | a0 = v0;
0x000095ec lw t9, -0x7f68(gp) | t9 = *(gp);
0x000095f0 move a1, v1 | a1 = v1;
0x000095f4 bal 0xf970 | fcn_0000f970 ();
0x000095f8 addu s0, v0, s0 | s0 = v0 + s0;
0x000095fc lw gp, 0x20(sp) | gp = *(var_20h_3);
0x00009600 b 0x9544 |
| } while (1);
| label_7:
0x00009604 lw a2, -0x7fdc(gp) | a2 = sym.imp.snd_pcm_hw_params_set_access_mask;
0x00009608 lw t9, -0x7e64(gp) | t9 = sym.imp.snprintf
0x0000960c move a3, s3 | a3 = s3;
0x00009610 move a1, s0 | a1 = s0;
| /* esilref: '&s' */
0x00009614 addiu a2, a2, 0x860 | a2 += 0x860;
0x00009618 move a0, v0 | a0 = v0;
0x0000961c jalr t9 | t9 ();
0x00009620 lw ra, 0x3c(sp) | ra = *(var_34h_2);
0x00009624 lw s4, 0x38(sp) | s4 = *(var_30h_2);
0x00009628 lw s3, 0x34(sp) | s3 = *(var_2ch_3);
0x0000962c lw s2, 0x30(sp) | s2 = *(var_28h_3);
0x00009630 lw s1, 0x2c(sp) | s1 = *(var_24h_4);
0x00009634 lw s0, 0x28(sp) | s0 = *(var_28h_4);
0x00009638 move v0, zero | v0 = 0;
0x0000963c addiu sp, sp, 0x40 |
0x00009640 jr ra | return v0;
| label_6:
0x00009644 addiu v0, zero, -0xc | v0 = -0xc;
0x00009648 b 0x95a4 | goto label_0;
| label_4:
0x0000964c lui gp, 2 |
0x00009650 addiu gp, gp, 0x29c4 |
0x00009654 addu gp, gp, t9 | gp += t9;
0x00009658 addiu sp, sp, -0x48 |
0x0000965c lw t9, -0x7d48(gp) | t9 = sym.imp.strlen;
0x00009660 sw gp, 0x20(sp) | *(var_10h_6) = gp;
0x00009664 sw ra, 0x44(sp) | *(var_34h_2) = ra;
0x00009668 sw s5, 0x40(sp) | *(var_30h_2) = s5;
0x0000966c sw s4, 0x3c(sp) | *(var_2ch_3) = s4;
0x00009670 sw s3, 0x38(sp) | *(var_28h_3) = s3;
0x00009674 sw s2, 0x34(sp) | *(var_24h_4) = s2;
0x00009678 sw s0, 0x2c(sp) | *(var_1ch_6) = s0;
0x0000967c move s5, a0 | s5 = a0;
0x00009680 sw s1, 0x30(sp) | *(var_28h_4) = s1;
0x00009684 move a0, a1 | a0 = a1;
0x00009688 move s3, a3 | s3 = a3;
0x0000968c move s2, a1 | s2 = a1;
0x00009690 move s4, a2 | s4 = a2;
0x00009694 jalr t9 | t9 ();
0x00009698 lw gp, 0x20(sp) | gp = *(var_10h_6);
0x0000969c move a0, s3 | a0 = s3;
0x000096a0 lw t9, -0x7d48(gp) | t9 = sym.imp.strlen;
0x000096a4 move s0, v0 | s0 = v0;
0x000096a8 jalr t9 | t9 ();
0x000096ac lw a0, 0x38(s5) | a0 = *((s5 + 14));
0x000096b0 addu s0, s0, v0 | s0 += v0;
0x000096b4 sltiu v0, a0, 2 | v0 = (a0 < 2) ? 1 : 0;
0x000096b8 lw gp, 0x20(sp) | gp = *(var_10h_6);
| if (v0 == 0) {
0x000096bc beqz v0, 0x974c | goto label_8;
| }
0x000096c0 addiu s0, s0, 1 | s0++;
| do {
0x000096c4 lw s1, 0x34(s5) | s1 = *((s5 + 13));
0x000096c8 lw t9, -0x7db0(gp) | t9 = sym.imp.malloc;
0x000096cc sll v0, s4, 2 | v0 = s4 << 2;
0x000096d0 addu s1, s1, v0 | s1 += v0;
0x000096d4 move a0, s0 | a0 = s0;
0x000096d8 jalr t9 | t9 ();
0x000096dc lw gp, 0x20(sp) | gp = *(var_10h_6);
0x000096e0 sw v0, (s1) | *(s1) = v0;
| if (v0 == 0) {
0x000096e4 beqz v0, 0x97dc | goto label_9;
| }
0x000096e8 lw a0, 0x38(s5) | a0 = *((s5 + 14));
0x000096ec addiu v1, zero, 1 | v1 = 1;
0x000096f0 lw t9, -0x7e48(gp) | t9 = sym.imp.__snprintf_chk
| if (a0 == v1) {
0x000096f4 beq a0, v1, 0x978c | goto label_10;
| }
0x000096f8 lw v1, -0x7fdc(gp) | v1 = sym.imp.snd_pcm_hw_params_set_access_mask;
0x000096fc sw s3, 0x1c(sp) | *(var_14h) = s3;
| /* str._s__i_s */
0x00009700 addiu v1, v1, 0x141c | v1 += 0x141c;
0x00009704 sw s4, 0x18(sp) | *(var_10h_7) = s4;
0x00009708 sw s2, 0x14(sp) | *(var_14h_2) = s2;
0x0000970c sw v1, 0x10(sp) | *(var_10h_8) = v1;
0x00009710 addiu a3, zero, -1 | a3 = -1;
0x00009714 addiu a2, zero, 1 | a2 = 1;
0x00009718 move a1, s0 | a1 = s0;
0x0000971c move a0, v0 | a0 = v0;
0x00009720 jalr t9 | t9 ();
0x00009724 move v0, zero | v0 = 0;
| label_1:
0x00009728 lw ra, 0x44(sp) | ra = *(var_34h_2);
0x0000972c lw s5, 0x40(sp) | s5 = *(var_30h_2);
0x00009730 lw s4, 0x3c(sp) | s4 = *(var_2ch_3);
0x00009734 lw s3, 0x38(sp) | s3 = *(var_28h_3);
0x00009738 lw s2, 0x34(sp) | s2 = *(var_24h_4);
0x0000973c lw s1, 0x30(sp) | s1 = *(var_28h_4);
0x00009740 lw s0, 0x2c(sp) | s0 = *(var_1ch_6);
0x00009744 addiu sp, sp, 0x48 |
0x00009748 jr ra | return v0;
| label_8:
0x0000974c lw t9, -0x7f6c(gp) | t9 = *(gp);
0x00009750 addiu s0, s0, 3 | s0 += 3;
0x00009754 bal 0xf9e0 | fcn_0000f9e0 ();
0x00009758 lw gp, 0x20(sp) | gp = *(var_10h_6);
0x0000975c move a0, v0 | a0 = v0;
0x00009760 lw t9, -0x7da4(gp) | t9 = sym.imp.log10;
0x00009764 move a1, v1 | a1 = v1;
0x00009768 jalr t9 | t9 ();
0x0000976c lw gp, 0x20(sp) | gp = *(var_10h_6);
0x00009770 move a0, v0 | a0 = v0;
0x00009774 lw t9, -0x7f68(gp) | t9 = *(gp);
0x00009778 move a1, v1 | a1 = v1;
0x0000977c bal 0xf970 | fcn_0000f970 ();
0x00009780 addu s0, v0, s0 | s0 = v0 + s0;
0x00009784 lw gp, 0x20(sp) | gp = *(var_10h_6);
0x00009788 b 0x96c4 |
| } while (1);
| label_10:
0x0000978c lw v1, -0x7fdc(gp) | v1 = sym.imp.snd_pcm_hw_params_set_access_mask;
0x00009790 sw s3, 0x18(sp) | *(var_10h_7) = s3;
| /* str._s_s */
0x00009794 addiu v1, v1, 0x1414 | v1 += 0x1414;
0x00009798 sw s2, 0x14(sp) | *(var_14h_2) = s2;
0x0000979c sw v1, 0x10(sp) | *(var_10h_8) = v1;
0x000097a0 move a1, s0 | a1 = s0;
0x000097a4 addiu a3, zero, -1 | a3 = -1;
0x000097a8 addiu a2, zero, 1 | a2 = 1;
0x000097ac move a0, v0 | a0 = v0;
0x000097b0 jalr t9 | t9 ();
0x000097b4 lw ra, 0x44(sp) | ra = *(var_34h_2);
0x000097b8 lw s5, 0x40(sp) | s5 = *(var_30h_2);
0x000097bc lw s4, 0x3c(sp) | s4 = *(var_2ch_3);
0x000097c0 lw s3, 0x38(sp) | s3 = *(var_28h_3);
0x000097c4 lw s2, 0x34(sp) | s2 = *(var_24h_4);
0x000097c8 lw s1, 0x30(sp) | s1 = *(var_28h_4);
0x000097cc lw s0, 0x2c(sp) | s0 = *(var_1ch_6);
0x000097d0 move v0, zero | v0 = 0;
0x000097d4 addiu sp, sp, 0x48 |
0x000097d8 jr ra | return v0;
| label_9:
0x000097dc addiu v0, zero, -0xc | v0 = -0xc;
0x000097e0 b 0x9728 | goto label_1;
| }
[*] Function printf used 4 times axfer