[*] Binary protection state of rtspd

  
  	Full RELRO     Canary found      NX disabled  No PIE       No RPATH     No RUNPATH   No Symbols


[*] Function sprintf tear down of rtspd

    ; assembly                               | /* r2dec pseudo code output */
                                             | /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/sbin/rtspd @ 0x42bd30 */
                                             | #include <stdint.h>
                                             |  
    ; (fcn) aav.0x0042bd30 ()                | void aav_0x0042bd30 () {
    0x0042bd30 lui gp, 7                     |     
    0x0042bd34 addiu gp, gp, 0x6320          |     
    0x0042bd38 addu gp, gp, t9               |     gp += t9;
    0x0042bd3c addiu sp, sp, -0x48           |     
    0x0042bd40 sw ra, 0x44(sp)               |     *(var_44h) = ra;
    0x0042bd44 sw fp, 0x40(sp)               |     *(var_40h) = fp;
    0x0042bd48 move fp, sp                   |     fp = sp;
    0x0042bd4c sw gp, 0x10(sp)               |     *(var_10h) = gp;
    0x0042bd50 sw a0, 0x24(fp)               |     *(arg_24h) = a0;
    0x0042bd54 sw a1, 0x20(fp)               |     *(arg_20h) = a1;
    0x0042bd58 sw a2, 0x1c(fp)               |     *(arg_1ch) = a2;
    0x0042bd5c lw t8, -0x75bc(gp)            |     t8 = *((gp - 7535));
    0x0042bd60 lw t8, (t8)                   |     t8 = *(t8);
    0x0042bd64 sw t8, 0x3c(fp)               |     *(arg_3ch) = t8;
    0x0042bd68 sw zero, 0x30(fp)             |     *(arg_30h) = 0;
    0x0042bd6c addiu t8, zero, 1             |     t8 = 1;
    0x0042bd70 sw t8, 0x34(fp)               |     *(arg_34h) = t8;
    0x0042bd74 lw t8, 0x34(fp)               |     t8 = *(arg_34h);
    0x0042bd78 andi t8, t8, 0xff             |     t8 &= 0xff;
    0x0042bd7c addiu t8, t8, 1               |     t8++;
    0x0042bd80 sb t8, 0x2d(fp)               |     *(arg_2dh) = t8;
    0x0042bd84 sb zero, 0x2e(fp)             |     *(arg_2eh) = 0;
    0x0042bd88 lw t8, 0x24(fp)               |     t8 = *(arg_24h);
    0x0042bd8c addiu v0, zero, 0x3e80        |     v0 = 0x3e80;
    0x0042bd90 sw v0, (t8)                   |     *(t8) = v0;
    0x0042bd94 lw t8, 0x20(fp)               |     t8 = *(arg_20h);
    0x0042bd98 addiu v0, zero, 1             |     v0 = 1;
    0x0042bd9c sw v0, (t8)                   |     *(t8) = v0;
    0x0042bda0 lw t8, 0x20(fp)               |     t8 = *(arg_20h);
    0x0042bda4 lw v0, (t8)                   |     v0 = *(t8);
    0x0042bda8 addiu t8, zero, 2             |     t8 = 2;
                                             |     if (v0 != t8) {
    0x0042bdac beq v0, t8, 0x42bdc8          |         
    0x0042bdb0 nop                           |         
    0x0042bdb4 lw t8, 0x20(fp)               |         t8 = *(arg_20h);
    0x0042bdb8 lw t8, (t8)                   |         t8 = *(t8);
    0x0042bdbc andi t8, t8, 0xff             |         t8 &= 0xff;
    0x0042bdc0 b 0x42bdcc                    |         goto label_0;
    0x0042bdc4 nop                           |         
                                             |     }
    0x0042bdc8 move t8, zero                 |     t8 = 0;
                                             | label_0:
    0x0042bdcc sb t8, 0x2f(fp)               |     *(arg_2fh) = t8;
    0x0042bdd0 b 0x42bde4                    |     goto label_1;
    0x0042bdd4 nop                           |     
                                             |     do {
    0x0042bdd8 lw t8, 0x30(fp)               |         t8 = *(arg_30h);
    0x0042bddc addiu t8, t8, 1               |         t8++;
    0x0042bde0 sw t8, 0x30(fp)               |         *(arg_30h) = t8;
                                             | label_1:
    0x0042bde4 lw v0, 0x30(fp)               |         v0 = *(arg_30h);
    0x0042bde8 addiu t8, zero, 0x10          |         t8 = 0x10;
    0x0042bdec sltu t8, v0, t8               |         t8 = (v0 < t8) ? 1 : 0;
                                             |         if (t8 == 0) {
    0x0042bdf0 beqz t8, 0x42be20             |             goto label_2;
                                             |         }
    0x0042bdf4 nop                           |         
    0x0042bdf8 lw t8, -0x7f1c(gp)            |         t8 = *((gp - 8135));
    0x0042bdfc lw v0, 0x30(fp)               |         v0 = *(arg_30h);
    0x0042be00 sll v0, v0, 2                 |         v0 <<= 2;
    0x0042be04 addiu t8, t8, -0x684c         |         t8 += -0x684c;
    0x0042be08 addu t8, v0, t8               |         t8 = v0 + t8;
    0x0042be0c lw v0, (t8)                   |         v0 = *(t8);
    0x0042be10 lw t8, 0x24(fp)               |         t8 = *(arg_24h);
    0x0042be14 lw t8, (t8)                   |         t8 = *(t8);
    0x0042be18 bne v0, t8, 0x42bdd8          |         
                                             |     } while (v0 != t8);
    0x0042be1c nop                           |     
                                             | label_2:
    0x0042be20 lw v0, 0x30(fp)               |     v0 = *(arg_30h);
    0x0042be24 addiu t8, zero, 0x10          |     t8 = 0x10;
    0x0042be28 sltu t8, v0, t8               |     t8 = (v0 < t8) ? 1 : 0;
                                             |     if (t8 != 0) {
    0x0042be2c beqz t8, 0x42be44             |         
    0x0042be30 nop                           |         
    0x0042be34 lw t8, 0x30(fp)               |         t8 = *(arg_30h);
    0x0042be38 andi t8, t8, 0xff             |         t8 &= 0xff;
    0x0042be3c b 0x42be48                    |         goto label_3;
    0x0042be40 nop                           |         
                                             |     }
    0x0042be44 addiu t8, zero, 0xff          |     t8 = 0xff;
                                             | label_3:
    0x0042be48 sb t8, 0x2e(fp)               |     *(arg_2eh) = t8;
    0x0042be4c lbu t8, 0x2d(fp)              |     t8 = *(arg_2dh);
    0x0042be50 sll t8, t8, 3                 |     t8 <<= 3;
    0x0042be54 sll v0, t8, 0x18              |     v0 = t8 << 0x18;
    0x0042be58 sra v0, v0, 0x18              |     v0 >>= 0x18;
    0x0042be5c lbu t8, 0x2e(fp)              |     t8 = *(arg_2eh);
    0x0042be60 sra t8, t8, 1                 |     t8 >>= 1;
    0x0042be64 sll t8, t8, 0x18              |     t8 <<= 0x18;
    0x0042be68 sra t8, t8, 0x18              |     t8 >>= 0x18;
    0x0042be6c or t8, v0, t8                 |     t8 = v0 | t8;
    0x0042be70 sll t8, t8, 0x18              |     t8 <<= 0x18;
    0x0042be74 sra t8, t8, 0x18              |     t8 >>= 0x18;
    0x0042be78 andi t8, t8, 0xff             |     t8 &= 0xff;
    0x0042be7c sb t8, 0x38(fp)               |     *(arg_38h) = t8;
    0x0042be80 lbu t8, 0x2e(fp)              |     t8 = *(arg_2eh);
    0x0042be84 sll t8, t8, 7                 |     t8 <<= 7;
    0x0042be88 sll v0, t8, 0x18              |     v0 = t8 << 0x18;
    0x0042be8c sra v0, v0, 0x18              |     v0 >>= 0x18;
    0x0042be90 lbu t8, 0x2f(fp)              |     t8 = *(arg_2fh);
    0x0042be94 sll t8, t8, 3                 |     t8 <<= 3;
    0x0042be98 sll t8, t8, 0x18              |     t8 <<= 0x18;
    0x0042be9c sra t8, t8, 0x18              |     t8 >>= 0x18;
    0x0042bea0 or t8, v0, t8                 |     t8 = v0 | t8;
    0x0042bea4 sll t8, t8, 0x18              |     t8 <<= 0x18;
    0x0042bea8 sra t8, t8, 0x18              |     t8 >>= 0x18;
    0x0042beac andi t8, t8, 0xff             |     t8 &= 0xff;
    0x0042beb0 sb t8, 0x39(fp)               |     *(arg_39h) = t8;
    0x0042beb4 lbu t8, 0x38(fp)              |     t8 = *(arg_38h);
    0x0042beb8 move v0, t8                   |     v0 = t8;
    0x0042bebc lbu t8, 0x39(fp)              |     t8 = *(arg_39h);
    0x0042bec0 lw a0, 0x1c(fp)               |     a0 = *(arg_1ch);
    0x0042bec4 lw v1, -0x7f1c(gp)            |     v1 = *((gp - 8135));
                                             |     /* str._02X_02x */
    0x0042bec8 addiu a1, v1, -0x6fb0         |     a1 = v1 + -0x6fb0;
    0x0042becc move a2, v0                   |     a2 = v0;
    0x0042bed0 move a3, t8                   |     a3 = t8;
    0x0042bed4 lw t8, -0x7848(gp)            |     t8 = sym.imp.sprintf
    0x0042bed8 move t9, t8                   |     t9 = t8;
    0x0042bedc jalr t9                       |     t9 ();
    0x0042bee0 nop                           |     
    0x0042bee4 lw gp, 0x10(fp)               |     gp = *(arg_10h);
    0x0042bee8 lw t8, -0x75bc(gp)            |     t8 = *((gp - 7535));
    0x0042beec lw v0, 0x3c(fp)               |     v0 = *(arg_3ch);
    0x0042bef0 lw t8, (t8)                   |     t8 = *(t8);
                                             |     if (v0 != t8) {
    0x0042bef4 beq v0, t8, 0x42bf0c          |         
    0x0042bef8 nop                           |         
    0x0042befc lw t8, -0x7720(gp)            |         t8 = sym.imp.__stack_chk_fail;
    0x0042bf00 move t9, t8                   |         t9 = t8;
    0x0042bf04 jalr t9                       |         t9 ();
    0x0042bf08 nop                           |         
                                             |     }
    0x0042bf0c move sp, fp                   |     
    0x0042bf10 lw ra, 0x44(sp)               |     ra = *(var_44h);
    0x0042bf14 lw fp, 0x40(sp)               |     fp = *(var_40h);
    0x0042bf18 addiu sp, sp, 0x48            |     
    0x0042bf1c jr ra                         |     return v0;
    0x0042bf20 nop                           |     
                                             | }
    ; assembly                                                                                       | /* r2dec pseudo code output */
                                                                                                     | /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/sbin/rtspd @ 0x42c38c */
                                                                                                     | #include <stdint.h>
                                                                                                     |  
    ; (fcn) method.ADTSAudioPoolSource.ADTSAudioPoolSource_UsageEnvironment__pass_value_t_ ()        | void method_ADTSAudioPoolSource_ADTSAudioPoolSource_UsageEnvironment_pass_value_t_ () {
                                                                                                     |     /* ADTSAudioPoolSource::ADTSAudioPoolSource(UsageEnvironment&, pass_value_t*) */
    0x0042c38c lui gp, 7                                                                             |     
    0x0042c390 addiu gp, gp, 0x5cc4                                                                  |     
    0x0042c394 addu gp, gp, t9                                                                       |     gp += t9;
    0x0042c398 addiu sp, sp, -0x58                                                                   |     
    0x0042c39c sw ra, 0x54(sp)                                                                       |     *(var_54h) = ra;
    0x0042c3a0 sw fp, 0x50(sp)                                                                       |     *(var_50h) = fp;
    0x0042c3a4 sw s0, 0x4c(sp)                                                                       |     *(var_4ch) = s0;
    0x0042c3a8 move fp, sp                                                                           |     fp = sp;
    0x0042c3ac sw gp, 0x18(sp)                                                                       |     *(var_18h) = gp;
    0x0042c3b0 sw a0, 0x2c(fp)                                                                       |     *(arg_2ch) = a0;
    0x0042c3b4 sw a1, 0x28(fp)                                                                       |     *(arg_28h) = a1;
    0x0042c3b8 sw a2, 0x24(fp)                                                                       |     *(arg_24h) = a2;
    0x0042c3bc lw t8, -0x75bc(gp)                                                                    |     t8 = *((gp - 7535));
    0x0042c3c0 lw t8, (t8)                                                                           |     t8 = *(t8);
    0x0042c3c4 sw t8, 0x44(fp)                                                                       |     *(arg_44h) = t8;
    0x0042c3c8 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c3cc move a0, t8                                                                           |     a0 = t8;
    0x0042c3d0 lw a1, 0x28(fp)                                                                       |     a1 = *(arg_28h);
    0x0042c3d4 lw t8, -0x78bc(gp)                                                                    |     t8 = *(gp);
    0x0042c3d8 move t9, t8                                                                           |     t9 = t8;
    0x0042c3dc jalr t9                                                                               |     t9 ();
    0x0042c3e0 nop                                                                                   |     
    0x0042c3e4 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c3e8 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c3ec lw v0, -0x7e9c(gp)                                                                    |     v0 = *(gp);
    0x0042c3f0 addiu v0, v0, 8                                                                       |     v0 += 8;
    0x0042c3f4 sw v0, (t8)                                                                           |     *(t8) = v0;
    0x0042c3f8 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c3fc addiu t8, t8, 0x7c                                                                    |     t8 += 0x7c;
    0x0042c400 move a0, t8                                                                           |     a0 = t8;
    0x0042c404 lw t8, -0x77f8(gp)                                                                    |     t8 = *(gp);
    0x0042c408 move t9, t8                                                                           |     t9 = t8;
    0x0042c40c jalr t9                                                                               |     t9 ();
    0x0042c410 nop                                                                                   |     
    0x0042c414 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c418 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c41c addiu v0, zero, 1                                                                     |     v0 = 1;
    0x0042c420 sb v0, 0xd0(t8)                                                                       |     *((t8 + 208)) = v0;
    0x0042c424 lw t8, -0x773c(gp)                                                                    |     t8 = *((gp - 7631));
    0x0042c428 lw t8, (t8)                                                                           |     t8 = *(t8);
    0x0042c42c lw v0, -0x7f1c(gp)                                                                    |     v0 = *((gp - 8135));
                                                                                                     |     /* str.create_new_adts_streaming_n */
    0x0042c430 addiu a0, v0, -0x6f10                                                                 |     a0 = v0 + -0x6f10;
    0x0042c434 addiu a1, zero, 1                                                                     |     a1 = 1;
    0x0042c438 addiu a2, zero, 0x1a                                                                  |     a2 = 0x1a;
    0x0042c43c move a3, t8                                                                           |     a3 = t8;
    0x0042c440 lw t8, -0x75c4(gp)                                                                    |     t8 = sym.imp.fwrite;
    0x0042c444 move t9, t8                                                                           |     t9 = t8;
    0x0042c448 jalr t9                                                                               |     t9 ();
    0x0042c44c nop                                                                                   |     
    0x0042c450 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c454 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c458 addiu t8, t8, 0x68                                                                    |     t8 += 0x68;
    0x0042c45c move a0, t8                                                                           |     a0 = t8;
    0x0042c460 move a1, zero                                                                         |     a1 = 0;
    0x0042c464 addiu a2, zero, 5                                                                     |     a2 = 5;
    0x0042c468 lw t8, -0x77f0(gp)                                                                    |     t8 = sym.imp.memset;
    0x0042c46c move t9, t8                                                                           |     t9 = t8;
    0x0042c470 jalr t9                                                                               |     t9 ();
    0x0042c474 nop                                                                                   |     
    0x0042c478 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c47c lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c480 addiu v1, t8, 0x5c                                                                    |     v1 = t8 + 0x5c;
    0x0042c484 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c488 addiu v0, t8, 0x60                                                                    |     v0 = t8 + 0x60;
    0x0042c48c lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c490 addiu t8, t8, 0x68                                                                    |     t8 += 0x68;
    0x0042c494 move a0, v1                                                                           |     a0 = v1;
    0x0042c498 move a1, v0                                                                           |     a1 = v0;
    0x0042c49c move a2, t8                                                                           |     a2 = t8;
    0x0042c4a0 lw t8, -0x7ea4(gp)                                                                    |     t8 = *((gp - 8105));
                                                                                                     |     /* aav.0x0042bd30 */
    0x0042c4a4 addiu t8, t8, -0x42d0                                                                 |     t8 += -0x42d0;
    0x0042c4a8 move t9, t8                                                                           |     t9 = t8;
    0x0042c4ac jalr t9                                                                               |     t9 ();
    0x0042c4b0 nop                                                                                   |     
    0x0042c4b4 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c4b8 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c4bc lw t8, 0x5c(t8)                                                                       |     t8 = *((t8 + 23));
    0x0042c4c0 lui v0, 0x3d09                                                                        |     v0 = 0x3d090000;
    0x0042c4c4 divu zero, v0, t8                                                                     |     __asm ("divu zero, v0, t8");
                                                                                                     |     if (t8 == 0) {
    0x0042c4c8 bnez t8, 0x42c4d0                                                                     |         
    0x0042c4cc break 7                                                                               |         __asm ("break 7");
                                                                                                     |     }
    0x0042c4d0 mfhi t8                                                                               |     __asm ("mfhi t8");
    0x0042c4d4 mflo v0                                                                               |     __asm ("mflo v0");
    0x0042c4d8 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c4dc sw v0, 0x64(t8)                                                                       |     *((t8 + 100)) = v0;
    0x0042c4e0 lw t8, 0x24(fp)                                                                       |     t8 = *(arg_24h);
                                                                                                     |     if (t8 != 0) {
    0x0042c4e4 beqz t8, 0x42c4fc                                                                     |         
    0x0042c4e8 nop                                                                                   |         
    0x0042c4ec lw t8, 0x24(fp)                                                                       |         t8 = *(arg_24h);
    0x0042c4f0 lb v0, 0x8c(t8)                                                                       |         v0 = *((t8 + 140));
    0x0042c4f4 lw t8, 0x2c(fp)                                                                       |         t8 = *(arg_2ch);
    0x0042c4f8 sb v0, 0x78(t8)                                                                       |         *((t8 + 120)) = v0;
                                                                                                     |     }
    0x0042c4fc lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c500 addiu t8, t8, 0x7c                                                                    |     t8 += 0x7c;
    0x0042c504 move a0, t8                                                                           |     a0 = t8;
    0x0042c508 addiu a1, zero, 1                                                                     |     a1 = 1;
    0x0042c50c lw t8, -0x7e98(gp)                                                                    |     t8 = sym.initAACGetter_AACGetter__int_;
    0x0042c510 move t9, t8                                                                           |     t9 = t8;
    0x0042c514 jalr t9                                                                               |     t9 ();
    0x0042c518 nop                                                                                   |     
    0x0042c51c lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c520 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c524 addiu v0, t8, 0x7c                                                                    |     v0 = t8 + 0x7c;
    0x0042c528 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c52c addiu t8, t8, 0xc4                                                                    |     t8 += 0xc4;
    0x0042c530 move a0, v0                                                                           |     a0 = v0;
    0x0042c534 move a1, t8                                                                           |     a1 = t8;
    0x0042c538 lw t8, -0x7628(gp)                                                                    |     t8 = *(gp);
    0x0042c53c move t9, t8                                                                           |     t9 = t8;
    0x0042c540 jalr t9                                                                               |     t9 ();
    0x0042c544 nop                                                                                   |     
    0x0042c548 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c54c mtlo v0                                                                               |     __asm ("mtlo v0");
    0x0042c550 mthi v1                                                                               |     __asm ("mthi v1");
    0x0042c554 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c558 mflo v0                                                                               |     __asm ("mflo v0");
    0x0042c55c mfhi v1                                                                               |     __asm ("mfhi v1");
    0x0042c560 sw v0, 0xc8(t8)                                                                       |     *((t8 + 200)) = v0;
    0x0042c564 sw v1, 0xcc(t8)                                                                       |     *((t8 + 204)) = v1;
    0x0042c568 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c56c addiu t8, t8, 0x7c                                                                    |     t8 += 0x7c;
    0x0042c570 move a0, t8                                                                           |     a0 = t8;
    0x0042c574 addiu a1, zero, 0xa                                                                   |     a1 = 0xa;
    0x0042c578 lw t8, -0x77cc(gp)                                                                    |     t8 = *(gp);
    0x0042c57c move t9, t8                                                                           |     t9 = t8;
    0x0042c580 jalr t9                                                                               |     t9 ();
    0x0042c584 nop                                                                                   |     
    0x0042c588 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c58c lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c590 lw t8, 0xc4(t8)                                                                       |     t8 = *((t8 + 49));
                                                                                                     |     if (t8 == 0) {
    0x0042c594 bnez t8, 0x42c5bc                                                                     |         
    0x0042c598 nop                                                                                   |         
    0x0042c59c lw t8, 0x2c(fp)                                                                       |         t8 = *(arg_2ch);
    0x0042c5a0 addiu t8, t8, 0x7c                                                                    |         t8 += 0x7c;
    0x0042c5a4 move a0, t8                                                                           |         a0 = t8;
    0x0042c5a8 lw t8, -0x7928(gp)                                                                    |         t8 = *(gp);
    0x0042c5ac move t9, t8                                                                           |         t9 = t8;
    0x0042c5b0 jalr t9                                                                               |         t9 ();
    0x0042c5b4 nop                                                                                   |         
    0x0042c5b8 lw gp, 0x18(fp)                                                                       |         gp = *(arg_18h);
                                                                                                     |     }
    0x0042c5bc lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c5c0 addiu t8, t8, 0x7c                                                                    |     t8 += 0x7c;
    0x0042c5c4 move a0, t8                                                                           |     a0 = t8;
    0x0042c5c8 lw t8, -0x78cc(gp)                                                                    |     t8 = *(gp);
    0x0042c5cc move t9, t8                                                                           |     t9 = t8;
    0x0042c5d0 jalr t9                                                                               |     t9 ();
    0x0042c5d4 nop                                                                                   |     
    0x0042c5d8 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c5dc lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c5e0 lw t8, 0xbc(t8)                                                                       |     t8 = *((t8 + 47));
    0x0042c5e4 lbu t8, 2(t8)                                                                         |     t8 = *((t8 + 2));
    0x0042c5e8 sb t8, 0x37(fp)                                                                       |     *(arg_37h) = t8;
    0x0042c5ec lbu t8, 0x37(fp)                                                                      |     t8 = *(arg_37h);
    0x0042c5f0 srl t8, t8, 6                                                                         |     t8 >>= 6;
    0x0042c5f4 sb t8, 0x38(fp)                                                                       |     *(arg_38h) = t8;
    0x0042c5f8 lbu t8, 0x37(fp)                                                                      |     t8 = *(arg_37h);
    0x0042c5fc andi t8, t8, 0x3c                                                                     |     t8 &= 0x3c;
    0x0042c600 sra t8, t8, 2                                                                         |     t8 >>= 2;
    0x0042c604 sb t8, 0x39(fp)                                                                       |     *(arg_39h) = t8;
    0x0042c608 lbu t8, 0x37(fp)                                                                      |     t8 = *(arg_37h);
    0x0042c60c andi t8, t8, 1                                                                        |     t8 &= 1;
    0x0042c610 sll t8, t8, 2                                                                         |     t8 <<= 2;
    0x0042c614 sll v0, t8, 0x18                                                                      |     v0 = t8 << 0x18;
    0x0042c618 sra v0, v0, 0x18                                                                      |     v0 >>= 0x18;
    0x0042c61c lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c620 lw t8, 0xbc(t8)                                                                       |     t8 = *((t8 + 47));
    0x0042c624 addiu t8, t8, 3                                                                       |     t8 += 3;
    0x0042c628 lbu t8, (t8)                                                                          |     t8 = *(t8);
    0x0042c62c srl t8, t8, 6                                                                         |     t8 >>= 6;
    0x0042c630 andi t8, t8, 0xff                                                                     |     t8 &= 0xff;
    0x0042c634 sll t8, t8, 0x18                                                                      |     t8 <<= 0x18;
    0x0042c638 sra t8, t8, 0x18                                                                      |     t8 >>= 0x18;
    0x0042c63c or t8, v0, t8                                                                         |     t8 = v0 | t8;
    0x0042c640 sll t8, t8, 0x18                                                                      |     t8 <<= 0x18;
    0x0042c644 sra t8, t8, 0x18                                                                      |     t8 >>= 0x18;
    0x0042c648 sb t8, 0x3a(fp)                                                                       |     *(arg_3ah) = t8;
    0x0042c64c lbu t8, 0x38(fp)                                                                      |     t8 = *(arg_38h);
    0x0042c650 addiu t8, t8, 1                                                                       |     t8++;
    0x0042c654 sb t8, 0x3b(fp)                                                                       |     *(arg_3bh) = t8;
    0x0042c658 lbu t8, 0x3b(fp)                                                                      |     t8 = *(arg_3bh);
    0x0042c65c sll t8, t8, 3                                                                         |     t8 <<= 3;
    0x0042c660 sll v0, t8, 0x18                                                                      |     v0 = t8 << 0x18;
    0x0042c664 sra v0, v0, 0x18                                                                      |     v0 >>= 0x18;
    0x0042c668 lbu t8, 0x39(fp)                                                                      |     t8 = *(arg_39h);
    0x0042c66c sra t8, t8, 1                                                                         |     t8 >>= 1;
    0x0042c670 sll t8, t8, 0x18                                                                      |     t8 <<= 0x18;
    0x0042c674 sra t8, t8, 0x18                                                                      |     t8 >>= 0x18;
    0x0042c678 or t8, v0, t8                                                                         |     t8 = v0 | t8;
    0x0042c67c sll t8, t8, 0x18                                                                      |     t8 <<= 0x18;
    0x0042c680 sra t8, t8, 0x18                                                                      |     t8 >>= 0x18;
    0x0042c684 andi t8, t8, 0xff                                                                     |     t8 &= 0xff;
    0x0042c688 sb t8, 0x40(fp)                                                                       |     *(arg_40h) = t8;
    0x0042c68c lbu t8, 0x39(fp)                                                                      |     t8 = *(arg_39h);
    0x0042c690 sll t8, t8, 7                                                                         |     t8 <<= 7;
    0x0042c694 sll v0, t8, 0x18                                                                      |     v0 = t8 << 0x18;
    0x0042c698 sra v0, v0, 0x18                                                                      |     v0 >>= 0x18;
    0x0042c69c lbu t8, 0x3a(fp)                                                                      |     t8 = *(arg_3ah);
    0x0042c6a0 sll t8, t8, 3                                                                         |     t8 <<= 3;
    0x0042c6a4 sll t8, t8, 0x18                                                                      |     t8 <<= 0x18;
    0x0042c6a8 sra t8, t8, 0x18                                                                      |     t8 >>= 0x18;
    0x0042c6ac or t8, v0, t8                                                                         |     t8 = v0 | t8;
    0x0042c6b0 sll t8, t8, 0x18                                                                      |     t8 <<= 0x18;
    0x0042c6b4 sra t8, t8, 0x18                                                                      |     t8 >>= 0x18;
    0x0042c6b8 andi t8, t8, 0xff                                                                     |     t8 &= 0xff;
    0x0042c6bc sb t8, 0x41(fp)                                                                       |     *(arg_41h) = t8;
    0x0042c6c0 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c6c4 addiu v1, t8, 0x68                                                                    |     v1 = t8 + 0x68;
    0x0042c6c8 lbu t8, 0x40(fp)                                                                      |     t8 = *(arg_40h);
    0x0042c6cc move v0, t8                                                                           |     v0 = t8;
    0x0042c6d0 lbu t8, 0x41(fp)                                                                      |     t8 = *(arg_41h);
    0x0042c6d4 move a0, v1                                                                           |     a0 = v1;
    0x0042c6d8 lw v1, -0x7f1c(gp)                                                                    |     v1 = *((gp - 8135));
                                                                                                     |     /* str._02X_02x */
    0x0042c6dc addiu a1, v1, -0x6fb0                                                                 |     a1 = v1 + -0x6fb0;
    0x0042c6e0 move a2, v0                                                                           |     a2 = v0;
    0x0042c6e4 move a3, t8                                                                           |     a3 = t8;
    0x0042c6e8 lw t8, -0x7848(gp)                                                                    |     t8 = sym.imp.sprintf
    0x0042c6ec move t9, t8                                                                           |     t9 = t8;
    0x0042c6f0 jalr t9                                                                               |     t9 ();
    0x0042c6f4 nop                                                                                   |     
    0x0042c6f8 lw gp, 0x18(fp)                                                                       |     gp = *(arg_18h);
    0x0042c6fc lbu v0, 0x39(fp)                                                                      |     v0 = *(arg_39h);
    0x0042c700 lw t8, -0x7f1c(gp)                                                                    |     t8 = *((gp - 8135));
    0x0042c704 sll v0, v0, 2                                                                         |     v0 <<= 2;
    0x0042c708 addiu t8, t8, -0x684c                                                                 |     t8 += -0x684c;
    0x0042c70c addu t8, v0, t8                                                                       |     t8 = v0 + t8;
    0x0042c710 lw v0, (t8)                                                                           |     v0 = *(t8);
    0x0042c714 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c718 sw v0, 0x5c(t8)                                                                       |     *((t8 + 92)) = v0;
    0x0042c71c lbu t8, 0x3a(fp)                                                                      |     t8 = *(arg_3ah);
                                                                                                     |     if (t8 != 0) {
    0x0042c720 beqz t8, 0x42c734                                                                     |         
    0x0042c724 nop                                                                                   |         
    0x0042c728 lbu t8, 0x3a(fp)                                                                      |         t8 = *(arg_3ah);
    0x0042c72c b 0x42c738                                                                            |         goto label_0;
    0x0042c730 nop                                                                                   |         
                                                                                                     |     }
    0x0042c734 addiu t8, zero, 2                                                                     |     t8 = 2;
                                                                                                     | label_0:
    0x0042c738 lw v0, 0x2c(fp)                                                                       |     v0 = *(arg_2ch);
    0x0042c73c sw t8, 0x60(v0)                                                                       |     *((v0 + 24)) = t8;
    0x0042c740 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c744 lw t8, 0x5c(t8)                                                                       |     t8 = *((t8 + 23));
    0x0042c748 lui v0, 0x3d09                                                                        |     v0 = 0x3d090000;
    0x0042c74c divu zero, v0, t8                                                                     |     __asm ("divu zero, v0, t8");
                                                                                                     |     if (t8 == 0) {
    0x0042c750 bnez t8, 0x42c758                                                                     |         
    0x0042c754 break 7                                                                               |         __asm ("break 7");
                                                                                                     |     }
    0x0042c758 mfhi t8                                                                               |     __asm ("mfhi t8");
    0x0042c75c mflo v0                                                                               |     __asm ("mflo v0");
    0x0042c760 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c764 sw v0, 0x64(t8)                                                                       |     *((t8 + 100)) = v0;
    0x0042c768 lw t8, 0x2c(fp)                                                                       |     t8 = *(arg_2ch);
    0x0042c76c sb zero, 0x2d1(t8)                                                                    |     *((t8 + 721)) = 0;
    0x0042c770 lw t8, -0x75bc(gp)                                                                    |     t8 = *((gp - 7535));
    0x0042c774 lw v0, 0x44(fp)                                                                       |     v0 = *(arg_44h);
    0x0042c778 lw t8, (t8)                                                                           |     t8 = *(t8);
                                                                                                     |     if (v0 == t8) {
    0x0042c77c beq v0, t8, 0x42c93c                                                                  |         void (*0x42c93c)() ();
                                                                                                     |     }
    0x0042c780 nop                                                                                   |     
    0x0042c784 b 0x42c92c                                                                            |     void (*0x42c92c)() ();
    0x0042c788 nop                                                                                   |     
                                                                                                     | }

[*] Function sprintf used 3 times rtspd