[*] Binary protection state of libffmpegapi.so

  	Full RELRO     Canary found      NX disabled  DSO          No RPATH     No RUNPATH   No Symbols

[*] Function sprintf tear down of libffmpegapi.so

    ; assembly                           | /* r2dec pseudo code output */

                                         | /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/lib/libffmpegapi.so @ 0x958 */

                                         | #include <stdint.h>

                                         |  

    ; (fcn) fcn.00000958 ()              | void fcn_00000958 () {

    0x00000958 lui gp, 2                 |     

    0x0000095c addiu gp, gp, -0x6968     |     

    0x00000960 addu gp, gp, t9           |     gp += t9;

    0x00000964 addiu sp, sp, -0x30       |     

    0x00000968 sw ra, 0x2c(sp)           |     *(var_2ch) = ra;

    0x0000096c sw s3, 0x28(sp)           |     *(var_28h) = s3;

    0x00000970 sw s2, 0x24(sp)           |     *(var_24h) = s2;

    0x00000974 sw s1, 0x20(sp)           |     *(var_20h) = s1;

    0x00000978 sw s0, 0x1c(sp)           |     *(var_1ch) = s0;

    0x0000097c lw t8, -0x7fe4(gp)        |     t8 = *((gp - 8185));

    0x00000980 sw gp, 0x10(sp)           |     *(var_10h) = gp;

    0x00000984 lbu v0, 0x2060(t8)        |     v0 = *((t8 + 8288));

    0x00000988 move s1, t8               |     s1 = t8;

                                         |     if (v0 != 0) {

    0x0000098c bnez v0, 0xa14            |         goto label_0;

                                         |     }

    0x00000990 lw t8, -0x7fac(gp)        |     t8 = *((gp - 8171));

    0x00000994 lw t8, -0x7fe0(gp)        |     t8 = *((gp - 8184));

                                         |     if (t8 != 0) {

    0x00000998 beqz t8, 0x9ac            |         

    0x0000099c lw t9, -0x7fac(gp)        |         t9 = *((gp - 8171));

    0x000009a0 lw a0, (t8)               |         a0 = *(t8);

    0x000009a4 jalr t9                   |         t9 ();

    0x000009a8 lw gp, 0x10(sp)           |         gp = *(var_10h);

                                         |     }

    0x000009ac lw v0, -0x7fe4(gp)        |     v0 = *((gp - 8185));

    0x000009b0 lw s2, -0x7fdc(gp)        |     s2 = *((gp - 8183));

    0x000009b4 addiu v0, v0, 0x1ff4      |     v0 += 0x1ff4;

    0x000009b8 subu s2, s2, v0           |     __asm ("subu s2, s2, v0");

    0x000009bc move s3, v0               |     s3 = v0;

    0x000009c0 sra s2, s2, 2             |     s2 >>= 2;

    0x000009c4 lw s0, -0x7fe4(gp)        |     s0 = *((gp - 8185));

    0x000009c8 addiu s2, s2, -1          |     s2 += -1;

                                         |     do {

    0x000009cc lw v0, 0x2064(s0)         |         v0 = *((s0 + 2073));

    0x000009d0 sltu t8, v0, s2           |         t8 = (v0 < s2) ? 1 : 0;

    0x000009d4 addiu v0, v0, 1           |         v0++;

                                         |         if (t8 == 0) {

    0x000009d8 beqz t8, 0x9fc            |             goto label_1;

                                         |         }

    0x000009dc sw v0, 0x2064(s0)         |         *((s0 + 2073)) = v0;

    0x000009e0 sll v0, v0, 2             |         v0 <<= 2;

    0x000009e4 addu v0, s3, v0           |         v0 = s3 + v0;

    0x000009e8 lw t9, (v0)               |         t9 = *(v0);

    0x000009ec jalr t9                   |         t9 ();

    0x000009f0 nop                       |         

    0x000009f4 lw gp, 0x10(sp)           |         gp = *(var_10h);

    0x000009f8 b 0x9cc                   |         

                                         |     } while (1);

                                         | label_1:

    0x000009fc lw t9, -0x7fd8(gp)        |     t9 = *((gp - 8182));

    0x00000a00 addiu t9, t9, 0x8c0       |     t9 += entry0;

    0x00000a04 jalr t9                   |     t9 ();

    0x00000a08 nop                       |     

    0x00000a0c addiu t8, zero, 1         |     t8 = 1;

    0x00000a10 sb t8, 0x2060(s1)         |     *((s1 + 8288)) = t8;

                                         | label_0:

    0x00000a14 lw ra, 0x2c(sp)           |     ra = *(var_2ch);

    0x00000a18 lw s3, 0x28(sp)           |     s3 = *(var_28h);

    0x00000a1c lw s2, 0x24(sp)           |     s2 = *(var_24h);

    0x00000a20 lw s1, 0x20(sp)           |     s1 = *(var_20h);

    0x00000a24 lw s0, 0x1c(sp)           |     s0 = *(var_1ch);

    0x00000a28 addiu sp, sp, 0x30        |     

    0x00000a2c jr ra                     |     return v0;

                                         | }

[*] Function sprintf used 1 times libffmpegapi.so