[*] Binary protection state of portmanagement.cgi
Full RELRO Canary found NX disabled PIE enabled RPATH No RUNPATH No Symbols
[*] Function printf tear down of portmanagement.cgi
move s2, v0
lw t9, -sym.imp.jc_get_integer(gp)
lw a1, 0x2c(sp)
move a2, s7
jalr t9
move a0, s3
lw v1, 0x70(sp)
lw gp, 0x18(sp)
bnez v1, 0x38e0
move fp, v0
lw v0, 0x30(sp)
lw t9, -sym.imp.g_strcmp0(gp)
addiu a1, v0, -0x52f0
jalr t9
move a0, s2
beqz v0, 0x33e4
lw gp, 0x18(sp)
lw t9, -sym.imp.g_strcmp0(gp)
lw a1, 0x40(sp)
jalr t9
move a0, s2
beqz v0, 0x33e8
lw gp, 0x18(sp)
lw a0, -0x7fc8(gp)
lw v0, 0x5c(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a2, s2
addiu a3, s4, -0x46d8
addiu a1, v0, -0x5110
addiu a0, a0, -0x50d0
sw s5, 0x10(sp)
lw s2, 0x44(sp)
jalr t9
lw fp, 0x4c(sp)
lw gp, 0x18(sp)
lw a0, (fp)
lw t9, -sym.imp.jc_generic_error(gp)
move a3, zero
move a2, v0
addiu a1, zero, 6
jalr t9
move s1, v0
lw gp, 0x18(sp)
sw v0, (fp)
lw t9, -sym.imp.g_free(gp)
jalr t9
--
lw gp, 0x18(sp)
lw t9, -0x7dc0(gp)
jalr t9
lw a0, 0x20(sp)
b 0x3168
lw gp, 0x18(sp)
lw a3, -0x7fc8(gp)
lw a2, -0x7fc8(gp)
lw t9, -sym.imp.g_log(gp)
addiu a3, a3, -0x4f58
addiu a2, a2, -0x5290
jalr t9
addiu a1, zero, 0x40
lw gp, 0x18(sp)
lw a0, (fp)
move a3, zero
lw a2, -0x7fc8(gp)
lw t9, -sym.imp.jc_generic_error(gp)
addiu a2, a2, -0x5280
jalr t9
addiu a1, zero, 6
lw gp, 0x18(sp)
b 0x3168
sw v0, (fp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a2, 0x64(sp)
move a1, s6
jalr t9
addiu a0, a0, -0x51c8
lw gp, 0x18(sp)
lw a0, (fp)
move a3, zero
lw t9, -sym.imp.jc_generic_error(gp)
move a2, v0
addiu a1, zero, 6
jalr t9
move s1, v0
lw gp, 0x18(sp)
sw v0, (fp)
move a0, s1
lw t9, -sym.imp.g_free(gp)
jalr t9
move s2, zero
b 0x3540
lw gp, 0x18(sp)
lw s1, -0x7fc0(gp)
lw a2, -0x7fc0(gp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_dbus_error_register_error_domain(gp)
addiu a3, zero, 7
addiu a2, a2, -0x3830
addiu a1, s1, -0x2d50
addiu a0, a0, -0x521c
jalr t9
lw s3, 0x60(sp)
lw gp, 0x18(sp)
lw a1, -0x2d50(s1)
addiu a2, zero, 1
lw t9, -sym.imp.g_error_matches(gp)
jalr t9
move a0, s3
beqz v0, 0x36e8
lw gp, 0x18(sp)
lw v0, 0x60(sp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a2, 8(v0)
move a1, s6
jalr t9
addiu a0, a0, -0x5204
lw gp, 0x18(sp)
lw a0, (fp)
move a3, zero
lw t9, -sym.imp.jc_generic_error(gp)
move a2, v0
addiu a1, zero, 6
jalr t9
move s1, v0
lw gp, 0x18(sp)
sw v0, (fp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
lw gp, 0x18(sp)
lw t9, -sym.imp.g_error_free(gp)
jalr t9
lw a0, 0x60(sp)
b 0x3540
lw gp, 0x18(sp)
lw a2, -0x7fc8(gp)
lw t9, -sym.imp.jc_generic_error(gp)
lw a0, (fp)
move a3, zero
addiu a2, a2, -0x5234
jalr t9
addiu a1, zero, 1
move s2, zero
lw gp, 0x18(sp)
b 0x3168
sw v0, (fp)
lw a2, -0x7fc8(gp)
lw t9, -sym.imp.jc_generic_error(gp)
lw a0, (fp)
move a3, zero
addiu a2, a2, -0x51f4
jalr t9
addiu a1, zero, 1
lw gp, 0x18(sp)
b 0x36a8
sw v0, (fp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a2, zero, 0x100
addiu a1, s4, -0x46d8
jalr t9
addiu a0, a0, -0x519c
lw gp, 0x18(sp)
lw a0, (fp)
move a3, zero
lw t9, -sym.imp.jc_generic_error(gp)
move a2, v0
addiu a1, zero, 6
jalr t9
move s1, v0
lw gp, 0x18(sp)
sw v0, (fp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
b 0x3540
lw gp, 0x18(sp)
lw v0, 0x60(sp)
--
lw v1, 0x3c(sp)
lw a0, 0x20(sp)
lw t9, -sym.iocontrol_dbus_iocontrol_state_call_start_action_sequence_sync(gp)
sw v1, 0x14(sp)
sw zero, 0x10(sp)
move a3, s3
move a2, zero
bal sym.iocontrol_dbus_iocontrol_state_call_start_action_sequence_sync
move a1, v0
beqz v0, 0x3940
lw gp, 0x18(sp)
lw t9, -sym.imp.json_utils_add_element_to_json_elements_list(gp)
lw a0, (s5)
addiu a3, zero, 3
move a2, s6
jalr t9
addiu a1, s1, -0x49a4
lw gp, 0x18(sp)
lw s2, 0x48(sp)
b 0x3528
sw v0, (s5)
lw a2, -0x7fc8(gp)
lw v0, 0x5c(sp)
lw s2, 0x44(sp)
lw fp, 0x4c(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a3, s5
addiu a2, a2, -0x5108
addiu a1, v0, -0x5110
lw a0, -0x7fc8(gp)
jalr t9
addiu a0, a0, -0x5100
lw gp, 0x18(sp)
lw a0, (fp)
move a3, zero
lw t9, -sym.imp.jc_generic_error(gp)
move a2, v0
addiu a1, zero, 5
jalr t9
move s1, v0
lw gp, 0x18(sp)
lw a0, 0x70(sp)
lw t9, -sym.imp.jc_error_free(gp)
jalr t9
sw v0, (fp)
lw gp, 0x18(sp)
move a0, s1
lw t9, -sym.imp.g_free(gp)
jalr t9
sw zero, 0x70(sp)
b 0x3528
lw gp, 0x18(sp)
lw a2, -0x7fc8(gp)
lw v0, 0x50(sp)
move a3, s5
lw s2, 0x44(sp)
lw fp, 0x4c(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a2, a2, -0x5108
b 0x3884
addiu a1, v0, -0x50d8
lw v0, 0x50(sp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a1, v0, -0x50d8
ori v0, zero, 0xffff
move a2, fp
addiu a3, s4, -0x46d8
addiu a0, a0, -0x50ac
sw v0, 0x14(sp)
sw s5, 0x10(sp)
lw s2, 0x44(sp)
jalr t9
lw fp, 0x4c(sp)
b 0x34f4
lw gp, 0x18(sp)
lw s1, -0x7fc0(gp)
lw a2, -0x7fc0(gp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_dbus_error_register_error_domain(gp)
addiu a3, zero, 7
addiu a2, a2, -0x3830
addiu a1, s1, -0x2d50
addiu a0, a0, -0x521c
jalr t9
lw s3, 0x60(sp)
lw gp, 0x18(sp)
lw a1, -0x2d50(s1)
addiu a2, zero, 2
lw t9, -sym.imp.g_error_matches(gp)
jalr t9
move a0, s3
lw gp, 0x18(sp)
beqz v0, 0x39e8
lw t9, -sym.imp.g_strdup_printf(gp)
lw a0, -0x7fc8(gp)
move a1, s6
jalr t9
addiu a0, a0, -0x506c
lw gp, 0x18(sp)
lw a0, (fp)
move a3, zero
lw t9, -sym.imp.jc_specific_error(gp)
move a2, v0
addiu a1, zero, 0x898
jalr t9
move s1, v0
lw gp, 0x18(sp)
sw v0, (fp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
lw gp, 0x18(sp)
lw t9, -sym.imp.g_error_free(gp)
jalr t9
--
sw v0, 0x20(sp)
lw v0, 0x50(sp)
lw t9, -sym.imp.g_variant_get(gp)
sw v0, 0x1c(sp)
lw v0, 0x4c(sp)
lw a2, 0x54(sp)
sw v0, 0x14(sp)
lw v0, 0x48(sp)
sw s5, 0x18(sp)
jalr t9
sw v0, 0x10(sp)
lw gp, 0x28(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
lw a0, 0x88(sp)
lw gp, 0x28(sp)
lw a0, (s7)
addiu a3, zero, 7
lw t9, -sym.imp.json_utils_add_element_to_json_elements_list(gp)
move a2, zero
jalr t9
move a1, zero
lw gp, 0x28(sp)
lw v1, 0x38(sp)
lw a1, 0x8c(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a0, v1, -0x4fdc
jalr t9
sw v0, (s7)
lw gp, 0x28(sp)
move a2, v0
move s6, v0
lw v0, 0x44(sp)
lw a0, (s7)
lw t9, -sym.imp.json_utils_add_element_to_json_elements_list(gp)
addiu a3, zero, 3
jalr t9
addiu a1, v0, -0x49a4
lw gp, 0x28(sp)
sw v0, (s7)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s6
lw gp, 0x28(sp)
lw v0, 0x3c(sp)
lw a0, (s7)
--
lw t9, -sym.imp.tree_element_count_value_list(gp)
jalr t9
move a0, v0
move v1, v0
sw v0, 0x2c(sp)
slti v0, v0, 0x101
beqz v0, 0x482c
lw gp, 0x20(sp)
beqz v1, 0x4830
lw a2, -0x7fc8(gp)
lw v0, 0x2c(sp)
blez v0, 0x48a4
lw s3, 0xc(s1)
lw v0, -0x7fc8(gp)
lw s2, -0x7fc8(gp)
addiu v0, v0, -0x4dc8
sw v0, 0x38(sp)
lw v0, -0x7fc8(gp)
move s6, s3
addiu v0, v0, -0x5100
move s1, zero
addiu s7, sp, 0x6c
addiu fp, sp, 0x70
b 0x4730
sw v0, 0x34(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a0, 0x34(sp)
move a3, s1
addiu a2, s5, -0x5108
jalr t9
addiu a1, s2, -0x49a4
lw gp, 0x20(sp)
lw a0, (s0)
move a3, zero
lw t9, -sym.imp.jc_generic_error(gp)
move a2, v0
addiu a1, zero, 5
jalr t9
sw v0, 0x28(sp)
lw gp, 0x20(sp)
lw a0, 0x6c(sp)
lw t9, -sym.imp.jc_error_free(gp)
jalr t9
sw v0, (s0)
lw gp, 0x20(sp)
lw t0, 0x28(sp)
--
beq v0, s1, 0x48a8
lw t9, -0x7fb8(gp)
lw t9, -sym.imp.jc_get_string(gp)
move a0, s6
move a2, s7
addiu a1, s2, -0x49a4
jalr t9
sw zero, 0x6c(sp)
lw a0, 0x6c(sp)
bnez a0, 0x46a4
lw gp, 0x20(sp)
lw t9, -sym.imp.strtol(gp)
move a2, zero
move a1, fp
move a0, v0
jalr t9
sw v0, 0x28(sp)
sltiu v0, v0, 0x100
lw gp, 0x20(sp)
beqz v0, 0x478c
lw t0, 0x28(sp)
lw v0, 0x70(sp)
lb v0, (v0)
beql v0, zero, 0x4710
lw v0, (s0)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a0, 0x38(sp)
move a3, s1
move a1, t0
addiu a2, s5, -0x5108
jalr t9
sw t0, 0x28(sp)
lw gp, 0x20(sp)
lw t0, 0x28(sp)
addiu a2, s2, -0x49a4
lw t9, -sym.generate_error_details(gp)
move a1, t0
move a0, zero
bal sym.generate_error_details
sw v0, 0x28(sp)
lw gp, 0x20(sp)
lw a0, (s0)
lw a2, 0x28(sp)
lw t9, -sym.imp.jc_generic_error(gp)
move a3, v0
jalr t9
--
move a3, v0
addiu a2, a2, -0x4ce0
jalr t9
addiu a1, zero, 1
lw gp, 0x20(sp)
lw a0, 0x5c(sp)
lw t9, -sym.imp.g_error_free(gp)
jalr t9
sw v0, (s0)
b 0x4a84
lw gp, 0x20(sp)
lw t9, -sym.imp.g_utf8_strlen(gp)
lw a0, 0x34(sp)
jalr t9
addiu a1, zero, -1
slti v0, v0, 0x100
beqz v0, 0x5058
lw gp, 0x20(sp)
lw v0, 0x34(sp)
beqz v0, 0x4fc8
move t1, v0
b 0x4b14
move t0, zero
lw v0, 0x5c(sp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
lw a2, 8(v0)
move a1, s1
jalr t9
addiu a0, a0, -0x5204
lw gp, 0x20(sp)
lw a0, (s0)
move a3, s5
lw t9, -sym.imp.jc_generic_error(gp)
move a2, v0
addiu a1, zero, 6
jalr t9
move s1, v0
lw gp, 0x20(sp)
sw v0, (s0)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s1
b 0x4d38
lw gp, 0x20(sp)
lw v0, 0x3c(sp)
--
move a0, zero
sw t1, 0x1c(sp)
sw v1, 0x14(sp)
sw v0, 0x10(sp)
jalr t9
sw s1, 0x18(sp)
lw gp, 0x20(sp)
lw t9, -sym.imp.g_error_free(gp)
jalr t9
lw a0, 0x5c(sp)
lw gp, 0x20(sp)
sw zero, 0x5c(sp)
b 0x4b58
lw t0, 0x40(sp)
lw a1, -0x7fc8(gp)
lw t9, -sym.imp.g_strcmp0(gp)
move a0, t0
sw t0, 0x40(sp)
jalr t9
addiu a1, a1, -0x51d0
lw gp, 0x20(sp)
beqz v0, 0x51d8
lw t0, 0x40(sp)
lw s7, 0x34(sp)
lw a0, -0x7fc8(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a3, t0
addiu a2, s7, -0x4ea0
move a1, s1
jalr t9
addiu a0, a0, -0x4c3c
lw gp, 0x20(sp)
addiu a2, s7, -0x4ea0
move a1, s1
lw t9, -sym.generate_error_details(gp)
move a0, zero
bal sym.generate_error_details
move s7, v0
lw gp, 0x20(sp)
lw a0, (s0)
move a2, s7
lw t9, -sym.imp.jc_generic_error(gp)
move a3, v0
jalr t9
addiu a1, zero, 6
lw gp, 0x20(sp)
[*] Function printf used 13 times portmanagement.cgi
