[*] Binary protection state of axfer

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of axfer

    ; assembly                                   | /* r2dec pseudo code output */
                                                 | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/axfer @ 0x9218 */
                                                 | #include <stdint.h>
                                                 |  
    ; (fcn) sym.xfer_context_post_process ()     | void xfer_context_post_process () {
    0x00009218 lui gp, 2                         |     
    0x0000921c addiu gp, gp, 0x2df8              |     
    0x00009220 addu gp, gp, t9                   |     gp += t9;
    0x00009224 lw a3, -0x7fdc(gp)                |     a3 = sym.imp.snd_pcm_hw_params_set_access_mask;
                                                 |     if (a0 != 0) {
    0x00009228 beqz a0, 0x924c                   |         
    0x0000922c lw v0, 8(a0)                      |         v0 = *((a0 + 2));
                                                 |         if (v0 != 0) {
    0x00009230 beqz v0, 0x9244                   |             
    0x00009234 nop                               |             
    0x00009238 lw t9, 0x14(v0)                   |             t9 = *((v0 + 5));
    0x0000923c jr t9                             |             t9 ();
    0x00009240 nop                               |             
                                                 |         }
    0x00009244 jr ra                             |         return v0;
    0x00009248 nop                               |         
                                                 |     }
    0x0000924c addiu sp, sp, -0x20               |     
    0x00009250 lw a1, -0x7fdc(gp)                |     a1 = sym.imp.snd_pcm_hw_params_set_access_mask;
    0x00009254 lw a0, -0x7fdc(gp)                |     a0 = sym.imp.snd_pcm_hw_params_set_access_mask;
    0x00009258 lw t9, -0x7cc0(gp)                |     t9 = sym.imp.__assert_fail;
                                                 |     /* str.xfer_context_post_process */
    0x0000925c addiu a3, a3, 0x1360              |     a3 += 0x1360;
    0x00009260 sw gp, 0x10(sp)                   |     *(var_10h_5) = gp;
    0x00009264 sw ra, 0x1c(sp)                   |     *(var_1ch_5) = ra;
    0x00009268 addiu a2, zero, 0xfd              |     a2 = 0xfd;
                                                 |     /* str..._.._alsa_utils_1.1.9_axfer_xfer.c */
    0x0000926c addiu a1, a1, 0x120c              |     a1 += 0x120c;
                                                 |     /* str.xfer */
    0x00009270 addiu a0, a0, 0x1230              |     a0 += 0x1230;
    0x00009274 jalr t9                           |     t9 ();
    0x00009278 nop                               |     
    0x0000927c nop                               |     
    0x00009280 lui gp, 2                         |     
    0x00009284 addiu gp, gp, 0x2d90              |     
    0x00009288 addu gp, gp, t9                   |     gp += t9;
    0x0000928c addiu sp, sp, -0x38               |     
    0x00009290 sw s3, 0x30(sp)                   |     *(var_30h_2) = s3;
    0x00009294 sw s2, 0x2c(sp)                   |     *(var_2ch_3) = s2;
    0x00009298 sw s0, 0x24(sp)                   |     *(var_24h_4) = s0;
    0x0000929c sw gp, 0x10(sp)                   |     *(var_10h_6) = gp;
    0x000092a0 sw ra, 0x34(sp)                   |     *(var_34h_2) = ra;
    0x000092a4 sw s1, 0x28(sp)                   |     *(var_28h_3) = s1;
    0x000092a8 lb v0, (a3)                       |     v0 = *(a3);
    0x000092ac move s0, a3                       |     s0 = a3;
    0x000092b0 move s3, a0                       |     s3 = a0;
    0x000092b4 move s2, a1                       |     s2 = a1;
                                                 |     if (v0 == 0) {
    0x000092b8 beqz v0, 0x9348                   |         goto label_2;
                                                 |     }
    0x000092bc lw t9, -0x7d48(gp)                |     t9 = sym.imp.strlen;
    0x000092c0 sw a2, 0x1c(sp)                   |     *(var_1ch_6) = a2;
    0x000092c4 move a0, a1                       |     a0 = a1;
    0x000092c8 jalr t9                           |     t9 ();
    0x000092cc lw gp, 0x10(sp)                   |     gp = *(var_10h_6);
    0x000092d0 move a0, s0                       |     a0 = s0;
    0x000092d4 lw t9, -0x7d48(gp)                |     t9 = sym.imp.strlen;
    0x000092d8 move s1, v0                       |     s1 = v0;
    0x000092dc jalr t9                           |     t9 ();
    0x000092e0 lw gp, 0x10(sp)                   |     gp = *(var_10h_6);
    0x000092e4 subu s1, s1, v0                   |     __asm ("subu s1, s1, v0");
    0x000092e8 addu s1, s2, s1                   |     s1 = s2 + s1;
    0x000092ec lw t9, -0x7e80(gp)                |     t9 = sym.imp.strcmp;
    0x000092f0 move a1, s0                       |     a1 = s0;
    0x000092f4 move a0, s1                       |     a0 = s1;
    0x000092f8 jalr t9                           |     t9 ();
    0x000092fc lw gp, 0x10(sp)                   |     gp = *(var_10h_6);
    0x00009300 lw a2, 0x1c(sp)                   |     a2 = *(var_1ch_6);
                                                 |     if (v0 == 0) {
    0x00009304 beqz v0, 0x9338                   |         goto label_3;
                                                 |     }
    0x00009308 lw t9, -0x7fdc(gp)                |     t9 = sym.imp.snd_pcm_hw_params_set_access_mask;
                                                 |     do {
    0x0000930c lw ra, 0x34(sp)                   |         ra = *(var_34h_2);
    0x00009310 lw s1, 0x28(sp)                   |         s1 = *(var_28h_3);
    0x00009314 move a3, s0                       |         a3 = s0;
    0x00009318 move a1, s2                       |         a1 = s2;
    0x0000931c lw s0, 0x24(sp)                   |         s0 = *(var_24h_4);
    0x00009320 lw s2, 0x2c(sp)                   |         s2 = *(var_2ch_3);
    0x00009324 move a0, s3                       |         a0 = s3;
    0x00009328 lw s3, 0x30(sp)                   |         s3 = *(var_30h_2);
    0x0000932c addiu t9, t9, -0x69b4             |         t9 += -0x69b4;
    0x00009330 addiu sp, sp, 0x38                |         
    0x00009334 b 0x964c                          |         goto label_4;
                                                 | label_3:
    0x00009338 sb zero, (s1)                     |         *(s1) = 0;
    0x0000933c lb v0, (s0)                       |         v0 = *(s0);
    0x00009340 lw t9, -0x7fdc(gp)                |         t9 = sym.imp.snd_pcm_hw_params_set_access_mask;
    0x00009344 bnez v0, 0x930c                   |         
                                                 |     } while (v0 != 0);
                                                 | label_2:
    0x00009348 lw t9, -0x7fdc(gp)                |     t9 = sym.imp.snd_pcm_hw_params_set_access_mask;
    0x0000934c lw ra, 0x34(sp)                   |     ra = *(var_34h_2);
    0x00009350 lw s1, 0x28(sp)                   |     s1 = *(var_28h_3);
    0x00009354 move a3, s0                       |     a3 = s0;
    0x00009358 move a1, s2                       |     a1 = s2;
    0x0000935c lw s0, 0x24(sp)                   |     s0 = *(var_24h_4);
    0x00009360 lw s2, 0x2c(sp)                   |     s2 = *(var_2ch_3);
    0x00009364 move a0, s3                       |     a0 = s3;
    0x00009368 lw s3, 0x30(sp)                   |     s3 = *(var_30h_2);
    0x0000936c addiu t9, t9, -0x6b18             |     t9 += -0x6b18;
    0x00009370 addiu sp, sp, 0x38                |     
    0x00009374 b 0x94e8                          |     
    0x000094e8 lui gp, 2                         |     
    0x000094ec addiu gp, gp, 0x2b28              |     
    0x000094f0 addu gp, gp, t9                   |     gp += t9;
    0x000094f4 addiu sp, sp, -0x40               |     
    0x000094f8 lw t9, -0x7d48(gp)                |     t9 = sym.imp.strlen;
    0x000094fc sw s2, 0x30(sp)                   |     *(var_28h_3) = s2;
    0x00009500 move s2, a0                       |     s2 = a0;
    0x00009504 sw gp, 0x20(sp)                   |     *(var_20h_3) = gp;
    0x00009508 sw s4, 0x38(sp)                   |     *(var_30h_2) = s4;
    0x0000950c sw s3, 0x34(sp)                   |     *(var_2ch_3) = s3;
    0x00009510 sw s0, 0x28(sp)                   |     *(var_28h_4) = s0;
    0x00009514 move a0, a1                       |     a0 = a1;
    0x00009518 sw ra, 0x3c(sp)                   |     *(var_34h_2) = ra;
    0x0000951c sw s1, 0x2c(sp)                   |     *(var_24h_4) = s1;
    0x00009520 move s3, a1                       |     s3 = a1;
    0x00009524 move s4, a2                       |     s4 = a2;
    0x00009528 jalr t9                           |     t9 ();
    0x0000952c lw a0, 0x38(s2)                   |     a0 = *((s2 + 14));
    0x00009530 move s0, v0                       |     s0 = v0;
    0x00009534 sltiu v0, a0, 2                   |     v0 = (a0 < 2) ? 1 : 0;
    0x00009538 lw gp, 0x20(sp)                   |     gp = *(var_20h_3);
                                                 |     if (v0 == 0) {
    0x0000953c beqz v0, 0x95c4                   |         goto label_5;
                                                 |     }
    0x00009540 addiu s0, s0, 1                   |     s0++;
                                                 |     do {
    0x00009544 lw s1, 0x34(s2)                   |         s1 = *((s2 + 13));
    0x00009548 lw t9, -0x7db0(gp)                |         t9 = sym.imp.malloc;
    0x0000954c sll v0, s4, 2                     |         v0 = s4 << 2;
    0x00009550 addu s1, s1, v0                   |         s1 += v0;
    0x00009554 move a0, s0                       |         a0 = s0;
    0x00009558 jalr t9                           |         t9 ();
    0x0000955c lw gp, 0x20(sp)                   |         gp = *(var_20h_3);
    0x00009560 sw v0, (s1)                       |         *(s1) = v0;
                                                 |         if (v0 == 0) {
    0x00009564 beqz v0, 0x9644                   |             goto label_6;
                                                 |         }
    0x00009568 lw a0, 0x38(s2)                   |         a0 = *((s2 + 14));
    0x0000956c addiu v1, zero, 1                 |         v1 = 1;
    0x00009570 lw v1, -0x7fdc(gp)                |         v1 = sym.imp.snd_pcm_hw_params_set_access_mask;
                                                 |         if (a0 == v1) {
    0x00009574 beq a0, v1, 0x9604                |             goto label_7;
                                                 |         }
    0x00009578 lw t9, -0x7e48(gp)                |         t9 = sym.imp.__snprintf_chk
                                                 |         /* str._s__i */
    0x0000957c addiu v1, v1, 0x140c              |         v1 += 0x140c;
    0x00009580 sw s4, 0x18(sp)                   |         *(var_10h_6) = s4;
    0x00009584 sw s3, 0x14(sp)                   |         *(var_14h) = s3;
    0x00009588 sw v1, 0x10(sp)                   |         *(var_10h_7) = v1;
    0x0000958c addiu a3, zero, -1                |         a3 = -1;
    0x00009590 addiu a2, zero, 1                 |         a2 = 1;
    0x00009594 move a1, s0                       |         a1 = s0;
    0x00009598 move a0, v0                       |         a0 = v0;
    0x0000959c jalr t9                           |         t9 ();
    0x000095a0 move v0, zero                     |         v0 = 0;
                                                 | label_0:
    0x000095a4 lw ra, 0x3c(sp)                   |         ra = *(var_34h_2);
    0x000095a8 lw s4, 0x38(sp)                   |         s4 = *(var_30h_2);
    0x000095ac lw s3, 0x34(sp)                   |         s3 = *(var_2ch_3);
    0x000095b0 lw s2, 0x30(sp)                   |         s2 = *(var_28h_3);
    0x000095b4 lw s1, 0x2c(sp)                   |         s1 = *(var_24h_4);
    0x000095b8 lw s0, 0x28(sp)                   |         s0 = *(var_28h_4);
    0x000095bc addiu sp, sp, 0x40                |         
    0x000095c0 jr ra                             |         return v0;
                                                 | label_5:
    0x000095c4 lw t9, -0x7f6c(gp)                |         t9 = *(gp);
    0x000095c8 addiu s0, s0, 3                   |         s0 += 3;
    0x000095cc bal 0xf9e0                        |         fcn_0000f9e0 ();
    0x000095d0 lw gp, 0x20(sp)                   |         gp = *(var_20h_3);
    0x000095d4 move a0, v0                       |         a0 = v0;
    0x000095d8 lw t9, -0x7da4(gp)                |         t9 = sym.imp.log10;
    0x000095dc move a1, v1                       |         a1 = v1;
    0x000095e0 jalr t9                           |         t9 ();
    0x000095e4 lw gp, 0x20(sp)                   |         gp = *(var_20h_3);
    0x000095e8 move a0, v0                       |         a0 = v0;
    0x000095ec lw t9, -0x7f68(gp)                |         t9 = *(gp);
    0x000095f0 move a1, v1                       |         a1 = v1;
    0x000095f4 bal 0xf970                        |         fcn_0000f970 ();
    0x000095f8 addu s0, v0, s0                   |         s0 = v0 + s0;
    0x000095fc lw gp, 0x20(sp)                   |         gp = *(var_20h_3);
    0x00009600 b 0x9544                          |         
                                                 |     } while (1);
                                                 | label_7:
    0x00009604 lw a2, -0x7fdc(gp)                |     a2 = sym.imp.snd_pcm_hw_params_set_access_mask;
    0x00009608 lw t9, -0x7e64(gp)                |     t9 = sym.imp.snprintf
    0x0000960c move a3, s3                       |     a3 = s3;
    0x00009610 move a1, s0                       |     a1 = s0;
                                                 |     /* esilref: '&s' */
    0x00009614 addiu a2, a2, 0x860               |     a2 += 0x860;
    0x00009618 move a0, v0                       |     a0 = v0;
    0x0000961c jalr t9                           |     t9 ();
    0x00009620 lw ra, 0x3c(sp)                   |     ra = *(var_34h_2);
    0x00009624 lw s4, 0x38(sp)                   |     s4 = *(var_30h_2);
    0x00009628 lw s3, 0x34(sp)                   |     s3 = *(var_2ch_3);
    0x0000962c lw s2, 0x30(sp)                   |     s2 = *(var_28h_3);
    0x00009630 lw s1, 0x2c(sp)                   |     s1 = *(var_24h_4);
    0x00009634 lw s0, 0x28(sp)                   |     s0 = *(var_28h_4);
    0x00009638 move v0, zero                     |     v0 = 0;
    0x0000963c addiu sp, sp, 0x40                |     
    0x00009640 jr ra                             |     return v0;
                                                 | label_6:
    0x00009644 addiu v0, zero, -0xc              |     v0 = -0xc;
    0x00009648 b 0x95a4                          |     goto label_0;
                                                 | label_4:
    0x0000964c lui gp, 2                         |     
    0x00009650 addiu gp, gp, 0x29c4              |     
    0x00009654 addu gp, gp, t9                   |     gp += t9;
    0x00009658 addiu sp, sp, -0x48               |     
    0x0000965c lw t9, -0x7d48(gp)                |     t9 = sym.imp.strlen;
    0x00009660 sw gp, 0x20(sp)                   |     *(var_10h_6) = gp;
    0x00009664 sw ra, 0x44(sp)                   |     *(var_34h_2) = ra;
    0x00009668 sw s5, 0x40(sp)                   |     *(var_30h_2) = s5;
    0x0000966c sw s4, 0x3c(sp)                   |     *(var_2ch_3) = s4;
    0x00009670 sw s3, 0x38(sp)                   |     *(var_28h_3) = s3;
    0x00009674 sw s2, 0x34(sp)                   |     *(var_24h_4) = s2;
    0x00009678 sw s0, 0x2c(sp)                   |     *(var_1ch_6) = s0;
    0x0000967c move s5, a0                       |     s5 = a0;
    0x00009680 sw s1, 0x30(sp)                   |     *(var_28h_4) = s1;
    0x00009684 move a0, a1                       |     a0 = a1;
    0x00009688 move s3, a3                       |     s3 = a3;
    0x0000968c move s2, a1                       |     s2 = a1;
    0x00009690 move s4, a2                       |     s4 = a2;
    0x00009694 jalr t9                           |     t9 ();
    0x00009698 lw gp, 0x20(sp)                   |     gp = *(var_10h_6);
    0x0000969c move a0, s3                       |     a0 = s3;
    0x000096a0 lw t9, -0x7d48(gp)                |     t9 = sym.imp.strlen;
    0x000096a4 move s0, v0                       |     s0 = v0;
    0x000096a8 jalr t9                           |     t9 ();
    0x000096ac lw a0, 0x38(s5)                   |     a0 = *((s5 + 14));
    0x000096b0 addu s0, s0, v0                   |     s0 += v0;
    0x000096b4 sltiu v0, a0, 2                   |     v0 = (a0 < 2) ? 1 : 0;
    0x000096b8 lw gp, 0x20(sp)                   |     gp = *(var_10h_6);
                                                 |     if (v0 == 0) {
    0x000096bc beqz v0, 0x974c                   |         goto label_8;
                                                 |     }
    0x000096c0 addiu s0, s0, 1                   |     s0++;
                                                 |     do {
    0x000096c4 lw s1, 0x34(s5)                   |         s1 = *((s5 + 13));
    0x000096c8 lw t9, -0x7db0(gp)                |         t9 = sym.imp.malloc;
    0x000096cc sll v0, s4, 2                     |         v0 = s4 << 2;
    0x000096d0 addu s1, s1, v0                   |         s1 += v0;
    0x000096d4 move a0, s0                       |         a0 = s0;
    0x000096d8 jalr t9                           |         t9 ();
    0x000096dc lw gp, 0x20(sp)                   |         gp = *(var_10h_6);
    0x000096e0 sw v0, (s1)                       |         *(s1) = v0;
                                                 |         if (v0 == 0) {
    0x000096e4 beqz v0, 0x97dc                   |             goto label_9;
                                                 |         }
    0x000096e8 lw a0, 0x38(s5)                   |         a0 = *((s5 + 14));
    0x000096ec addiu v1, zero, 1                 |         v1 = 1;
    0x000096f0 lw t9, -0x7e48(gp)                |         t9 = sym.imp.__snprintf_chk
                                                 |         if (a0 == v1) {
    0x000096f4 beq a0, v1, 0x978c                |             goto label_10;
                                                 |         }
    0x000096f8 lw v1, -0x7fdc(gp)                |         v1 = sym.imp.snd_pcm_hw_params_set_access_mask;
    0x000096fc sw s3, 0x1c(sp)                   |         *(var_14h) = s3;
                                                 |         /* str._s__i_s */
    0x00009700 addiu v1, v1, 0x141c              |         v1 += 0x141c;
    0x00009704 sw s4, 0x18(sp)                   |         *(var_10h_7) = s4;
    0x00009708 sw s2, 0x14(sp)                   |         *(var_14h_2) = s2;
    0x0000970c sw v1, 0x10(sp)                   |         *(var_10h_8) = v1;
    0x00009710 addiu a3, zero, -1                |         a3 = -1;
    0x00009714 addiu a2, zero, 1                 |         a2 = 1;
    0x00009718 move a1, s0                       |         a1 = s0;
    0x0000971c move a0, v0                       |         a0 = v0;
    0x00009720 jalr t9                           |         t9 ();
    0x00009724 move v0, zero                     |         v0 = 0;
                                                 | label_1:
    0x00009728 lw ra, 0x44(sp)                   |         ra = *(var_34h_2);
    0x0000972c lw s5, 0x40(sp)                   |         s5 = *(var_30h_2);
    0x00009730 lw s4, 0x3c(sp)                   |         s4 = *(var_2ch_3);
    0x00009734 lw s3, 0x38(sp)                   |         s3 = *(var_28h_3);
    0x00009738 lw s2, 0x34(sp)                   |         s2 = *(var_24h_4);
    0x0000973c lw s1, 0x30(sp)                   |         s1 = *(var_28h_4);
    0x00009740 lw s0, 0x2c(sp)                   |         s0 = *(var_1ch_6);
    0x00009744 addiu sp, sp, 0x48                |         
    0x00009748 jr ra                             |         return v0;
                                                 | label_8:
    0x0000974c lw t9, -0x7f6c(gp)                |         t9 = *(gp);
    0x00009750 addiu s0, s0, 3                   |         s0 += 3;
    0x00009754 bal 0xf9e0                        |         fcn_0000f9e0 ();
    0x00009758 lw gp, 0x20(sp)                   |         gp = *(var_10h_6);
    0x0000975c move a0, v0                       |         a0 = v0;
    0x00009760 lw t9, -0x7da4(gp)                |         t9 = sym.imp.log10;
    0x00009764 move a1, v1                       |         a1 = v1;
    0x00009768 jalr t9                           |         t9 ();
    0x0000976c lw gp, 0x20(sp)                   |         gp = *(var_10h_6);
    0x00009770 move a0, v0                       |         a0 = v0;
    0x00009774 lw t9, -0x7f68(gp)                |         t9 = *(gp);
    0x00009778 move a1, v1                       |         a1 = v1;
    0x0000977c bal 0xf970                        |         fcn_0000f970 ();
    0x00009780 addu s0, v0, s0                   |         s0 = v0 + s0;
    0x00009784 lw gp, 0x20(sp)                   |         gp = *(var_10h_6);
    0x00009788 b 0x96c4                          |         
                                                 |     } while (1);
                                                 | label_10:
    0x0000978c lw v1, -0x7fdc(gp)                |     v1 = sym.imp.snd_pcm_hw_params_set_access_mask;
    0x00009790 sw s3, 0x18(sp)                   |     *(var_10h_7) = s3;
                                                 |     /* str._s_s */
    0x00009794 addiu v1, v1, 0x1414              |     v1 += 0x1414;
    0x00009798 sw s2, 0x14(sp)                   |     *(var_14h_2) = s2;
    0x0000979c sw v1, 0x10(sp)                   |     *(var_10h_8) = v1;
    0x000097a0 move a1, s0                       |     a1 = s0;
    0x000097a4 addiu a3, zero, -1                |     a3 = -1;
    0x000097a8 addiu a2, zero, 1                 |     a2 = 1;
    0x000097ac move a0, v0                       |     a0 = v0;
    0x000097b0 jalr t9                           |     t9 ();
    0x000097b4 lw ra, 0x44(sp)                   |     ra = *(var_34h_2);
    0x000097b8 lw s5, 0x40(sp)                   |     s5 = *(var_30h_2);
    0x000097bc lw s4, 0x3c(sp)                   |     s4 = *(var_2ch_3);
    0x000097c0 lw s3, 0x38(sp)                   |     s3 = *(var_28h_3);
    0x000097c4 lw s2, 0x34(sp)                   |     s2 = *(var_24h_4);
    0x000097c8 lw s1, 0x30(sp)                   |     s1 = *(var_28h_4);
    0x000097cc lw s0, 0x2c(sp)                   |     s0 = *(var_1ch_6);
    0x000097d0 move v0, zero                     |     v0 = 0;
    0x000097d4 addiu sp, sp, 0x48                |     
    0x000097d8 jr ra                             |     return v0;
                                                 | label_9:
    0x000097dc addiu v0, zero, -0xc              |     v0 = -0xc;
    0x000097e0 b 0x9728                          |     goto label_1;
                                                 | }

[*] Function printf used 4 times axfer