[*] Binary protection state of rtspd
Full RELRO Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function system tear down of rtspd
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/sbin/rtspd @ 0x46c160 */
| #include <stdint.h>
|
; (fcn) method.ulawSpeakerSink.ulawSpeakerSink_UsageEnvironment__int__int_ () | void method_ulawSpeakerSink_ulawSpeakerSink_UsageEnvironment_int_int_ () {
| /* ulawSpeakerSink::ulawSpeakerSink(UsageEnvironment&, int, int) */
0x0046c160 lui gp, 3 |
0x0046c164 addiu gp, gp, 0x5ef0 |
0x0046c168 addu gp, gp, t9 | gp += t9;
0x0046c16c addiu sp, sp, -0x40 |
0x0046c170 sw ra, 0x3c(sp) | *(var_3ch) = ra;
0x0046c174 sw fp, 0x38(sp) | *(var_38h) = fp;
0x0046c178 sw s0, 0x34(sp) | *(var_34h) = s0;
0x0046c17c move fp, sp | fp = sp;
0x0046c180 sw gp, 0x10(sp) | *(var_10h) = gp;
0x0046c184 sw a0, 0x24(fp) | *(arg_24h) = a0;
0x0046c188 sw a1, 0x20(fp) | *(arg_20h) = a1;
0x0046c18c sw a2, 0x1c(fp) | *(arg_1ch) = a2;
0x0046c190 sw a3, 0x18(fp) | *(arg_18h) = a3;
0x0046c194 lw t8, -0x75bc(gp) | t8 = *((gp - 7535));
0x0046c198 lw t8, (t8) | t8 = *(t8);
0x0046c19c sw t8, 0x2c(fp) | *(arg_2ch) = t8;
0x0046c1a0 lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c1a4 move a0, t8 | a0 = t8;
0x0046c1a8 lw a1, 0x20(fp) | a1 = *(arg_20h);
0x0046c1ac lw t8, -0x7600(gp) | t8 = *(gp);
0x0046c1b0 move t9, t8 | t9 = t8;
0x0046c1b4 jalr t9 | t9 ();
0x0046c1b8 nop |
0x0046c1bc lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c1c0 lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c1c4 lw v0, -0x79dc(gp) | v0 = *(gp);
0x0046c1c8 addiu v0, v0, 8 | v0 += 8;
0x0046c1cc sw v0, (t8) | *(t8) = v0;
0x0046c1d0 lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c1d4 lw v0, 0x18(fp) | v0 = *(arg_18h);
0x0046c1d8 sw v0, 0x38(t8) | *((t8 + 56)) = v0;
0x0046c1dc lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c1e0 addiu t8, t8, 0x44 | t8 += 0x44;
0x0046c1e4 move a0, t8 | a0 = t8;
0x0046c1e8 lw t8, -0x7684(gp) | t8 = *(gp);
0x0046c1ec move t9, t8 | t9 = t8;
0x0046c1f0 jalr t9 | t9 ();
0x0046c1f4 nop |
0x0046c1f8 lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c1fc lw t8, -0x7f1c(gp) | t8 = *((gp - 8135));
| /* str.speaker_setup__sp_en_1____dev_null_2_1 */
0x0046c200 addiu a0, t8, -0x2de0 | a0 = t8 + -0x2de0;
0x0046c204 lw t8, -0x75cc(gp) | t8 = sym.imp.system
0x0046c208 move t9, t8 | t9 = t8;
0x0046c20c jalr t9 | t9 ();
0x0046c210 nop |
0x0046c214 lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c218 lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c21c addiu t8, t8, 0x44 | t8 += 0x44;
0x0046c220 move a0, t8 | a0 = t8;
0x0046c224 lw a1, 0x1c(fp) | a1 = *(arg_1ch);
0x0046c228 lw t8, -0x78e8(gp) | t8 = *(gp);
0x0046c22c move t9, t8 | t9 = t8;
0x0046c230 jalr t9 | t9 ();
0x0046c234 nop |
0x0046c238 lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c23c lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c240 addiu t8, t8, 0x44 | t8 += 0x44;
0x0046c244 move a0, t8 | a0 = t8;
0x0046c248 lw a1, 0x18(fp) | a1 = *(arg_18h);
0x0046c24c lw t8, -0x7834(gp) | t8 = *(gp);
0x0046c250 move t9, t8 | t9 = t8;
0x0046c254 jalr t9 | t9 ();
0x0046c258 nop |
0x0046c25c lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c260 lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c264 addiu t8, t8, 0x44 | t8 += 0x44;
0x0046c268 move a0, t8 | a0 = t8;
0x0046c26c lw t8, -0x7808(gp) | t8 = *(gp);
0x0046c270 move t9, t8 | t9 = t8;
0x0046c274 jalr t9 | t9 ();
0x0046c278 nop |
0x0046c27c lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c280 lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c284 addiu v0, zero, 0x500 | v0 = 0x500;
0x0046c288 sw v0, 0x3c(t8) | *((t8 + 60)) = v0;
0x0046c28c lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c290 lw t8, 0x3c(t8) | t8 = *((t8 + 15));
0x0046c294 move a0, t8 | a0 = t8;
0x0046c298 lw t8, -0x77c4(gp) | t8 = sym.imp.operator_new___unsigned_int_;
0x0046c29c move t9, t8 | t9 = t8;
0x0046c2a0 jalr t9 | t9 ();
0x0046c2a4 nop |
0x0046c2a8 lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c2ac lw t8, 0x24(fp) | t8 = *(arg_24h);
0x0046c2b0 sw v0, 0x40(t8) | *((t8 + 64)) = v0;
0x0046c2b4 lw t8, -0x79d8(gp) | t8 = sym.up_speaker_occupy_count__;
0x0046c2b8 move t9, t8 | t9 = t8;
0x0046c2bc jalr t9 | t9 ();
0x0046c2c0 nop |
0x0046c2c4 lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c2c8 lw t8, -0x75bc(gp) | t8 = *((gp - 7535));
0x0046c2cc lw v0, 0x2c(fp) | v0 = *(arg_2ch);
0x0046c2d0 lw t8, (t8) | t8 = *(t8);
| if (v0 == t8) {
0x0046c2d4 beq v0, t8, 0x46c360 | void (*0x46c360)() ();
| }
0x0046c2d8 nop |
0x0046c2dc b 0x46c350 | void (*0x46c350)() ();
0x0046c2e0 nop |
| }
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/sbin/rtspd @ 0x46c37c */
| #include <stdint.h>
|
; (fcn) method.ulawSpeakerSink.ulawSpeakerSink__ () | void method_ulawSpeakerSink_ulawSpeakerSink_ () {
| /* ulawSpeakerSink::~ulawSpeakerSink() */
0x0046c37c lui gp, 3 |
0x0046c380 addiu gp, gp, 0x5cd4 |
0x0046c384 addu gp, gp, t9 | gp += t9;
0x0046c388 addiu sp, sp, -0x38 |
0x0046c38c sw ra, 0x34(sp) | *(var_34h) = ra;
0x0046c390 sw fp, 0x30(sp) | *(var_30h) = fp;
0x0046c394 sw s0, 0x2c(sp) | *(var_2ch) = s0;
0x0046c398 move fp, sp | fp = sp;
0x0046c39c sw gp, 0x10(sp) | *(var_10h) = gp;
0x0046c3a0 sw a0, 0x1c(fp) | *(arg_1ch) = a0;
0x0046c3a4 lw t8, -0x75bc(gp) | t8 = *((gp - 7535));
0x0046c3a8 lw t8, (t8) | t8 = *(t8);
0x0046c3ac sw t8, 0x24(fp) | *(arg_24h) = t8;
0x0046c3b0 lw t8, 0x1c(fp) | t8 = *(arg_1ch);
0x0046c3b4 lw v0, -0x79dc(gp) | v0 = *(gp);
0x0046c3b8 addiu v0, v0, 8 | v0 += 8;
0x0046c3bc sw v0, (t8) | *(t8) = v0;
0x0046c3c0 lw t8, 0x1c(fp) | t8 = *(arg_1ch);
0x0046c3c4 lw t8, 0x40(t8) | t8 = *((t8 + 16));
| if (t8 != 0) {
0x0046c3c8 beqz t8, 0x46c3f0 |
0x0046c3cc nop |
0x0046c3d0 lw t8, 0x1c(fp) | t8 = *(arg_1ch);
0x0046c3d4 lw t8, 0x40(t8) | t8 = *((t8 + 16));
0x0046c3d8 move a0, t8 | a0 = t8;
0x0046c3dc lw t8, -0x7878(gp) | t8 = sym.imp.operator_delete___void_;
0x0046c3e0 move t9, t8 | t9 = t8;
0x0046c3e4 jalr t9 | t9 ();
0x0046c3e8 nop |
0x0046c3ec lw gp, 0x10(fp) | gp = *(arg_10h);
| }
0x0046c3f0 lw t8, 0x1c(fp) | t8 = *(arg_1ch);
0x0046c3f4 addiu t8, t8, 0x44 | t8 += 0x44;
0x0046c3f8 move a0, t8 | a0 = t8;
0x0046c3fc lw t8, -0x75a0(gp) | t8 = *(gp);
0x0046c400 move t9, t8 | t9 = t8;
0x0046c404 jalr t9 | t9 ();
0x0046c408 nop |
0x0046c40c lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c410 lw t8, -0x7f1c(gp) | t8 = *((gp - 8135));
| /* str.speaker_setup__sp_en_0____dev_null_2_1 */
0x0046c414 addiu a0, t8, -0x2db8 | a0 = t8 + -0x2db8;
0x0046c418 lw t8, -0x75cc(gp) | t8 = sym.imp.system
0x0046c41c move t9, t8 | t9 = t8;
0x0046c420 jalr t9 | t9 ();
0x0046c424 nop |
0x0046c428 lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c42c lw t8, -0x79d4(gp) | t8 = sym.down_speaker_occupy_count__;
0x0046c430 move t9, t8 | t9 = t8;
0x0046c434 jalr t9 | t9 ();
0x0046c438 nop |
0x0046c43c lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c440 lw t8, 0x1c(fp) | t8 = *(arg_1ch);
0x0046c444 addiu t8, t8, 0x44 | t8 += 0x44;
0x0046c448 move a0, t8 | a0 = t8;
0x0046c44c lw t8, -0x7968(gp) | t8 = *(gp);
0x0046c450 move t9, t8 | t9 = t8;
0x0046c454 jalr t9 | t9 ();
0x0046c458 nop |
0x0046c45c lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c460 lw t8, 0x1c(fp) | t8 = *(arg_1ch);
0x0046c464 move a0, t8 | a0 = t8;
0x0046c468 lw t8, -0x7698(gp) | t8 = *(gp);
0x0046c46c move t9, t8 | t9 = t8;
0x0046c470 jalr t9 | t9 ();
0x0046c474 nop |
0x0046c478 lw gp, 0x10(fp) | gp = *(arg_10h);
0x0046c47c move t8, zero | t8 = 0;
| if (t8 != 0) {
0x0046c480 beqz t8, 0x46c4a0 |
0x0046c484 nop |
0x0046c488 lw a0, 0x1c(fp) | a0 = *(arg_1ch);
0x0046c48c lw t8, -0x760c(gp) | t8 = sym.imp.operator_delete_void_;
0x0046c490 move t9, t8 | t9 = t8;
0x0046c494 jalr t9 | t9 ();
0x0046c498 nop |
0x0046c49c lw gp, 0x10(fp) | gp = *(arg_10h);
| }
0x0046c4a0 lw t8, -0x75bc(gp) | t8 = *((gp - 7535));
0x0046c4a4 lw v0, 0x24(fp) | v0 = *(arg_24h);
0x0046c4a8 lw t8, (t8) | t8 = *(t8);
| if (v0 != t8) {
0x0046c4ac beq v0, t8, 0x46c528 |
0x0046c4b0 nop |
0x0046c4b4 b 0x46c518 | goto label_0;
0x0046c4b8 nop |
| label_0:
0x0046c518 lw t8, -0x7720(gp) | t8 = sym.imp.__stack_chk_fail;
0x0046c51c move t9, t8 | t9 = t8;
0x0046c520 jalr t9 | t9 ();
0x0046c524 nop |
| }
0x0046c528 move sp, fp |
0x0046c52c lw ra, 0x34(sp) | ra = *(var_34h);
0x0046c530 lw fp, 0x30(sp) | fp = *(var_30h);
0x0046c534 lw s0, 0x2c(sp) | s0 = *(var_2ch);
0x0046c538 addiu sp, sp, 0x38 |
0x0046c53c jr ra | return v0;
0x0046c540 nop |
| }
[*] Function system used 3 times rtspd
