[*] Binary protection state of libonvifkit.so
No RELRO Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of libonvifkit.so
175f4: 8f180000 lw t8,0(t8)
175f8: afd80134 sw t8,308(s8)
175fc: 8fd80024 lw t8,36(s8)
17600: 17000003 bnez t8,17610 <_ZN8Response12dumpItemListERSsP19ItemListDescription@@Base+0x50>
17604: 00000000 nop
17608: 1000005d b 17780 <_ZN8Response12dumpItemListERSsP19ItemListDescription@@Base+0x1c0>
1760c: 00000000 nop
17610: 8f988030 lw t8,-32720(gp)
17614: 27c30034 addiu v1,s8,52
17618: 270269d8 addiu v0,t8,27096
1761c: 24180100 li t8,256
17620: 00602021 move a0,v1
17624: 00402821 move a1,v0
17628: 03003021 move a2,t8
1762c: 8f988658 lw t8,-31144(gp)
17630: 0300c821 move t9,t8
17634: 0320f809 jalr t9
17638: 00000000 nop
1763c: 8fdc0018 lw gp,24(s8)
17640: 8fd80024 lw t8,36(s8)
17644: 27180004 addiu t8,t8,4
17648: 27c20034 addiu v0,s8,52
1764c: 24420040 addiu v0,v0,64
17650: 00402021 move a0,v0
17654: 03002821 move a1,t8
17658: 8f988058 lw t8,strcpy
1765c: 0300c821 move t9,t8
17660: 0320f809 jalr t9
17664: 00000000 nop
17668: 8fdc0018 lw gp,24(s8)
1766c: 8fd80024 lw t8,36(s8)
17670: 27180044 addiu t8,t8,68
17674: 27c20034 addiu v0,s8,52
17678: 244200c0 addiu v0,v0,192
1767c: 00402021 move a0,v0
17680: 03002821 move a1,t8
17684: 8f988058 lw t8,strcpy
17688: 0300c821 move t9,t8
1768c: 0320f809 jalr t9
--
24dd4: 8fdc0010 lw gp,16(s8)
24dd8: 24180001 li t8,1
24ddc: 12380003 beq s1,t8,24dec <_Z20checkTopicExpressionRKSsP16RulesDescriptionP12Subscription@@Base+0x460>
24de0: 00000000 nop
24de4: 1000001a b 24e50 <_Z20checkTopicExpressionRKSsP16RulesDescriptionP12Subscription@@Base+0x4c4>
24de8: 00000000 nop
24dec: 00000000 nop
24df0: 8fc20030 lw v0,48(s8)
24df4: 2418ffff li t8,-1
24df8: 1458ff06 bne v0,t8,24a14 <_Z20checkTopicExpressionRKSsP16RulesDescriptionP12Subscription@@Base+0x88>
24dfc: 00000000 nop
24e00: 8fd8001c lw t8,28(s8)
24e04: 13000011 beqz t8,24e4c <_Z20checkTopicExpressionRKSsP16RulesDescriptionP12Subscription@@Base+0x4c0>
24e08: 00000000 nop
24e0c: 8fd8001c lw t8,28(s8)
24e10: 2710016c addiu s0,t8,364
24e14: 8fc40024 lw a0,36(s8)
24e18: 8f988630 lw t8,-31184(gp)
24e1c: 0300c821 move t9,t8
24e20: 0320f809 jalr t9
24e24: 00000000 nop
24e28: 8fdc0010 lw gp,16(s8)
24e2c: 0040c021 move t8,v0
24e30: 02002021 move a0,s0
24e34: 03002821 move a1,t8
24e38: 8f988058 lw t8,strcpy
24e3c: 0300c821 move t9,t8
24e40: 0320f809 jalr t9
--
00030884 <_ZN9BaseOnvif8getModelEPc@@Base>:
30884: 3c1c0005 lui gp,0x5
30888: 279cf6fc addiu gp,gp,-2308
3088c: 0399e021 addu gp,gp,t9
30890: 27bdfd98 addiu sp,sp,-616
30894: afbf0264 sw ra,612(sp)
30898: afbe0260 sw s8,608(sp)
3089c: 03a0f021 move s8,sp
308a0: afbc0010 sw gp,16(sp)
308a4: afc4001c sw a0,28(s8)
308a8: afc50018 sw a1,24(s8)
308ac: 8f988698 lw t8,-31080(gp)
308b0: 8f180000 lw t8,0(t8)
308b4: afd8025c sw t8,604(s8)
308b8: 27d80024 addiu t8,s8,36
308bc: 03002021 move a0,t8
308c0: 8f9882bc lw t8,-32068(gp)
308c4: 0300c821 move t9,t8
308c8: 0320f809 jalr t9
308cc: 00000000 nop
308d0: 8fdc0010 lw gp,16(s8)
308d4: 27d80024 addiu t8,s8,36
308d8: 27180040 addiu t8,t8,64
308dc: 8fc40018 lw a0,24(s8)
308e0: 03002821 move a1,t8
308e4: 8f988058 lw t8,strcpy
308e8: 0300c821 move t9,t8
308ec: 0320f809 jalr t9
--
328c0: 0300c821 move t9,t8
328c4: 0320f809 jalr t9
328c8: 00000000 nop
328cc: 8fdc0010 lw gp,16(s8)
328d0: 27d80024 addiu t8,s8,36
328d4: 03002021 move a0,t8
328d8: 8f9882bc lw t8,-32068(gp)
328dc: 0300c821 move t9,t8
328e0: 0320f809 jalr t9
328e4: 00000000 nop
328e8: 8fdc0010 lw gp,16(s8)
328ec: 0040c021 move t8,v0
328f0: 0018c02b sltu t8,zero,t8
328f4: 331800ff andi t8,t8,0xff
328f8: 13000004 beqz t8,3290c <_ZN9BaseOnvif9getSystemEP11OnvifSystem@@Base+0x90>
328fc: 00000000 nop
32900: 0000c021 move t8,zero
32904: 10000023 b 32994 <_ZN9BaseOnvif9getSystemEP11OnvifSystem@@Base+0x118>
32908: 00000000 nop
3290c: 8fd80018 lw t8,24(s8)
32910: 270200e0 addiu v0,t8,224
32914: 27d80024 addiu t8,s8,36
32918: 271800e0 addiu t8,t8,224
3291c: 00402021 move a0,v0
32920: 03002821 move a1,t8
32924: 8f988058 lw t8,strcpy
32928: 0300c821 move t9,t8
3292c: 0320f809 jalr t9
32930: 00000000 nop
32934: 8fdc0010 lw gp,16(s8)
32938: 8fd80018 lw t8,24(s8)
3293c: 27020020 addiu v0,t8,32
32940: 27d80024 addiu t8,s8,36
32944: 27180020 addiu t8,t8,32
32948: 00402021 move a0,v0
3294c: 03002821 move a1,t8
32950: 8f988058 lw t8,strcpy
32954: 0300c821 move t9,t8
32958: 0320f809 jalr t9
3295c: 00000000 nop
32960: 8fdc0010 lw gp,16(s8)
32964: 8fd80018 lw t8,24(s8)
32968: 27020040 addiu v0,t8,64
3296c: 27d80024 addiu t8,s8,36
32970: 27180040 addiu t8,t8,64
32974: 00402021 move a0,v0
32978: 03002821 move a1,t8
3297c: 8f988058 lw t8,strcpy
32980: 0300c821 move t9,t8
32984: 0320f809 jalr t9
--
4cf6c: 0320f809 jalr t9
4cf70: 00000000 nop
4cf74: 8fdc0010 lw gp,16(s8)
4cf78: 0040c021 move t8,v0
4cf7c: afd80028 sw t8,40(s8)
4cf80: 8fd80028 lw t8,40(s8)
4cf84: 13000017 beqz t8,4cfe4 <_ZN12RealtekOnvif14getIpv6AddressEPKcPc14IPV6_ADDR_TYPE@@Base+0x1e4>
4cf88: 00000000 nop
4cf8c: 27d8003c addiu t8,s8,60
4cf90: 03002021 move a0,t8
4cf94: 24050040 li a1,64
4cf98: 8fc60028 lw a2,40(s8)
4cf9c: 8f988394 lw t8,-31852(gp)
4cfa0: 0300c821 move t9,t8
4cfa4: 0320f809 jalr t9
4cfa8: 00000000 nop
4cfac: 8fdc0010 lw gp,16(s8)
4cfb0: 0040c021 move t8,v0
4cfb4: 0018c02b sltu t8,zero,t8
4cfb8: 331800ff andi t8,t8,0xff
4cfbc: 13000009 beqz t8,4cfe4 <_ZN12RealtekOnvif14getIpv6AddressEPKcPc14IPV6_ADDR_TYPE@@Base+0x1e4>
4cfc0: 00000000 nop
4cfc4: 27d8003c addiu t8,s8,60
4cfc8: 8fc4001c lw a0,28(s8)
4cfcc: 03002821 move a1,t8
4cfd0: 8f988058 lw t8,strcpy
4cfd4: 0300c821 move t9,t8
4cfd8: 0320f809 jalr t9
--
4d00c: 00000000 nop
4d010: 8fdc0010 lw gp,16(s8)
4d014: 0040c021 move t8,v0
4d018: 2718ffff addiu t8,t8,-1
4d01c: 8fc2001c lw v0,28(s8)
4d020: 0058c021 addu t8,v0,t8
4d024: a3000000 sb zero,0(t8)
4d028: 10000028 b 4d0cc <_ZN12RealtekOnvif14getIpv6AddressEPKcPc14IPV6_ADDR_TYPE@@Base+0x2cc>
4d02c: 00000000 nop
4d030: 8fc40020 lw a0,32(s8)
4d034: 8f988174 lw t8,-32396(gp)
4d038: 0300c821 move t9,t8
4d03c: 0320f809 jalr t9
4d040: 00000000 nop
4d044: 8fdc0010 lw gp,16(s8)
4d048: 0040c021 move t8,v0
4d04c: afd8002c sw t8,44(s8)
4d050: 8fd8002c lw t8,44(s8)
4d054: afd80030 sw t8,48(s8)
4d058: 8fd80030 lw t8,48(s8)
4d05c: 13000015 beqz t8,4d0b4 <_ZN12RealtekOnvif14getIpv6AddressEPKcPc14IPV6_ADDR_TYPE@@Base+0x2b4>
4d060: 00000000 nop
4d064: 8fd80030 lw t8,48(s8)
4d068: 8fc4001c lw a0,28(s8)
4d06c: 03002821 move a1,t8
4d070: 8f988058 lw t8,strcpy
4d074: 0300c821 move t9,t8
4d078: 0320f809 jalr t9
--
4d35c: 27c20034 addiu v0,s8,52
4d360: 8fd8002c lw t8,44(s8)
4d364: 0018c180 sll t8,t8,0x6
4d368: 0058c021 addu t8,v0,t8
4d36c: 03002021 move a0,t8
4d370: 8f988670 lw t8,-31120(gp)
4d374: 0300c821 move t9,t8
4d378: 0320f809 jalr t9
4d37c: 00000000 nop
4d380: 8fdc0010 lw gp,16(s8)
4d384: 0040c021 move t8,v0
4d388: 2f180001 sltiu t8,t8,1
4d38c: 331800ff andi t8,t8,0xff
4d390: 13000013 beqz t8,4d3e0 <_ZN12RealtekOnvif14getIpv6GatewayEPKcPA64_c@@Base+0x2d4>
4d394: 00000000 nop
4d398: 8fd80028 lw t8,40(s8)
4d39c: 0018c180 sll t8,t8,0x6
4d3a0: 8fc2001c lw v0,28(s8)
4d3a4: 00581021 addu v0,v0,t8
4d3a8: 27c30034 addiu v1,s8,52
4d3ac: 8fd8002c lw t8,44(s8)
4d3b0: 0018c180 sll t8,t8,0x6
4d3b4: 0078c021 addu t8,v1,t8
4d3b8: 00402021 move a0,v0
4d3bc: 03002821 move a1,t8
4d3c0: 8f988058 lw t8,strcpy
4d3c4: 0300c821 move t9,t8
4d3c8: 0320f809 jalr t9
--
4db70: afc0004c sw zero,76(s8)
4db74: afc00050 sw zero,80(s8)
4db78: afc00054 sw zero,84(s8)
4db7c: afc00058 sw zero,88(s8)
4db80: afc0005c sw zero,92(s8)
4db84: afc00060 sw zero,96(s8)
4db88: afc00064 sw zero,100(s8)
4db8c: afc00068 sw zero,104(s8)
4db90: afc00024 sw zero,36(s8)
4db94: 27d80028 addiu t8,s8,40
4db98: 03002021 move a0,t8
4db9c: 00002821 move a1,zero
4dba0: 8f9884c0 lw t8,-31552(gp)
4dba4: 0300c821 move t9,t8
4dba8: 0320f809 jalr t9
4dbac: 00000000 nop
4dbb0: 8fdc0010 lw gp,16(s8)
4dbb4: 0040c021 move t8,v0
4dbb8: 2f180001 sltiu t8,t8,1
4dbbc: 331800ff andi t8,t8,0xff
4dbc0: 1300000b beqz t8,4dbf0 <_ZN12RealtekOnvif10getNTPPathEPc@@Base+0x128>
4dbc4: 00000000 nop
4dbc8: 27d80028 addiu t8,s8,40
4dbcc: 8fc40018 lw a0,24(s8)
4dbd0: 03002821 move a1,t8
4dbd4: 8f988058 lw t8,strcpy
4dbd8: 0300c821 move t9,t8
4dbdc: 0320f809 jalr t9
4dbe0: 00000000 nop
4dbe4: 8fdc0010 lw gp,16(s8)
4dbe8: 10000043 b 4dcf8 <_ZN12RealtekOnvif10getNTPPathEPc@@Base+0x230>
4dbec: 00000000 nop
4dbf0: 27d80038 addiu t8,s8,56
4dbf4: 03002021 move a0,t8
4dbf8: 8f9882e8 lw t8,-32024(gp)
4dbfc: 0300c821 move t9,t8
4dc00: 0320f809 jalr t9
4dc04: 00000000 nop
4dc08: 8fdc0010 lw gp,16(s8)
4dc0c: 27d80038 addiu t8,s8,56
4dc10: 8fc40018 lw a0,24(s8)
4dc14: 03002821 move a1,t8
4dc18: 8f988058 lw t8,strcpy
4dc1c: 0300c821 move t9,t8
4dc20: 0320f809 jalr t9
[*] Function strcpy used 12 times libonvifkit.so
