[*] Binary protection state of scp.openssh
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of scp.openssh
lw s5, 0x48(sp)
lw s4, 0x44(sp)
lw s3, 0x40(sp)
lw s2, 0x3c(sp)
lw s1, 0x38(sp)
lw s0, 0x34(sp)
jr ra
addiu sp, sp, 0x50
lw s2, -0x7bc0(gp)
lw a0, -0x7fd4(gp)
lw t9, -sym.imp.fwrite(gp)
move s5, a1
lw a3, (s2)
addiu a2, zero, 0xa
addiu a1, zero, 1
jalr t9
addiu a0, a0, 0x272c
lw v0, (s5)
beqz v0, 0x4490
lw gp, 0x20(sp)
lw s3, -0x7fd4(gp)
move s0, zero
addiu s3, s3, 0x38ac
lw a2, (s1)
sll v0, s0, 2
lw t9, -sym.fmprintf(gp)
lwx a2, v0(a2)
lw a0, (s2)
bal sym.fmprintf
move a1, s3
lw v0, (s5)
addiu s0, s0, 1
sltu v0, s0, v0
bnez v0, 0x4460
lw gp, 0x20(sp)
lw t9, -sym.imp.fputc(gp)
lw a1, (s2)
jalr t9
addiu a0, zero, 0xa
b 0x4324
lw gp, 0x20(sp)
lw t9, -sym.imp.strerror(gp)
jalr t9
nop
lw gp, 0x20(sp)
sw v0, 0x1c(sp)
--
sw s4, 0x58(sp)
sw s3, 0x54(sp)
sw s2, 0x50(sp)
sw gp, 0x20(sp)
sw ra, 0x6c(sp)
sw fp, 0x68(sp)
sw s0, 0x48(sp)
lw v1, (s1)
lw v0, (v0)
move s7, a0
move s5, a1
move s2, a2
move s6, a3
lw s3, 0x80(sp)
lw s4, 0x84(sp)
sw v1, 0x44(sp)
beqz v0, 0x47f0
addiu v0, zero, -1
lw v0, -0x7bc0(gp)
lw a0, (v0)
lw v0, -obj.ssh_program(gp)
beqz a1, 0x496c
lw a2, (v0)
move v0, a1
lw a1, -0x7fd4(gp)
lw t9, -sym.fmprintf(gp)
sw s6, 0x14(sp)
sw v0, 0x10(sp)
move a3, s7
bal sym.fmprintf
addiu a1, a1, 0x2784
lw gp, 0x20(sp)
addiu v0, zero, -1
bne s2, v0, 0x4800
lw t9, -sym.imp.pipe(gp)
lw v0, -obj.sshport(gp)
lw s2, (v0)
jalr t9
addiu a0, sp, 0x3c
addiu s0, zero, -1
beq v0, s0, 0x4978
lw gp, 0x20(sp)
lw t9, -sym.imp.pipe(gp)
jalr t9
addiu a0, sp, 0x2c
beq v0, s0, 0x4bec
--
lw s4, -0x7bfc(gp)
sw s6, 0x48(sp)
sw s5, 0x44(sp)
sw s3, 0x3c(sp)
sw s1, 0x34(sp)
sw gp, 0x20(sp)
sw ra, 0x4c(sp)
sw s2, 0x38(sp)
sw s0, 0x30(sp)
lw v1, (s4)
lw v0, (v0)
move s5, a0
move s3, a1
move s1, a2
move s6, a3
sw v1, 0x2c(sp)
beqz v0, 0x4cd4
addiu s2, zero, -1
lw v0, -0x7bc0(gp)
lw a0, (v0)
lw v0, -obj.ssh_program(gp)
beqz a1, 0x4ea8
lw a2, (v0)
move v0, a1
lw a1, -0x7fd4(gp)
lw t9, -sym.fmprintf(gp)
sw s6, 0x14(sp)
sw v0, 0x10(sp)
move a3, s5
bal sym.fmprintf
addiu a1, a1, 0x27c8
lw gp, 0x20(sp)
addiu s2, zero, -1
beq s1, s2, 0x4d74
lw t9, -sym.imp.fork(gp)
jalr t9
nop
move s0, v0
beqz v0, 0x4f58
lw gp, 0x20(sp)
addiu v0, zero, -1
beq s0, v0, 0x4f0c
addiu s2, sp, 0x28
addiu s1, zero, -1
b 0x4d20
addiu s3, zero, 4
--
lw a3, -0x7fd4(gp)
lw s0, -obj.errs(gp)
lw t9, -0x7f7c(gp)
addiu a1, zero, 1
bal 0x1d880
lw a0, (s0)
lb a0, 0x23(sp)
addiu v1, zero, 1
lw gp, 0x18(sp)
sw v0, (s0)
bne a0, v1, 0x51ac
addiu v0, zero, -1
lw a0, 0x1024(sp)
lw v1, (s5)
bne a0, v1, 0x51a0
lw ra, 0x1044(sp)
lw s6, 0x1040(sp)
lw s5, 0x103c(sp)
lw s4, 0x1038(sp)
lw s3, 0x1034(sp)
lw s2, 0x1030(sp)
lw s1, 0x102c(sp)
lw s0, 0x1028(sp)
jr ra
addiu sp, sp, 0x1048
lw t9, -sym.snmprintf(gp)
addiu s1, sp, 0x824
addiu v0, sp, 0x24
addiu a3, a3, 0x27b4
move a2, zero
addiu a1, zero, 0x800
move a0, s1
sb zero, -1(s0)
bal sym.snmprintf
sw v0, 0x10(sp)
lw gp, 0x18(sp)
lw t9, -sym.imp.strlen(gp)
jalr t9
move a0, s1
lw gp, 0x18(sp)
move a3, v0
move a2, s1
lw t9, -sym.atomicio(gp)
lw a0, -0x7b1c(gp)
bal sym.atomicio
addiu a1, zero, 2
--
lw v1, 0x1c(sp)
lw v0, (s1)
bne v1, v0, 0x5524
lw ra, 0x34(sp)
lw s3, 0x30(sp)
lw s2, 0x2c(sp)
lw s1, 0x28(sp)
lw s0, 0x24(sp)
jr ra
addiu sp, sp, 0x38
lw v1, -obj.remout(gp)
addiu v0, zero, -1
lw a0, (v1)
beq a0, v0, 0x547c
lw v0, -obj.iamremote(gp)
lw a1, -0x7fd4(gp)
lw t9, -sym.imp.fdopen(gp)
jalr t9
addiu a1, a1, 0x2928
move a1, v0
lw gp, 0x10(sp)
bnez v0, 0x5400
sw v0, 0x6624(s0)
b 0x547c
lw v0, -obj.iamremote(gp)
lw t9, -sym.vfmprintf(gp)
addiu v0, sp, 0x3c
lw a0, (s0)
move a2, v0
move a1, s3
bal sym.vfmprintf
sw v0, 0x18(sp)
lw gp, 0x10(sp)
lw a1, (s0)
lw t9, -sym.imp.fputc(gp)
jalr t9
addiu a0, zero, 0xa
b 0x5488
lw gp, 0x10(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 4
addiu gp, gp, -0x74c0
addu gp, gp, t9
addiu sp, sp, -0x40
--
sw v0, 0x24(sp)
beqz a0, 0x5608
lw s4, 0x6620(s1)
lw s3, -obj.errs(gp)
lw t9, -0x7f7c(gp)
move s2, a0
lw a0, (s3)
bal 0x1d880
addiu a1, zero, 1
lw gp, 0x18(sp)
beqz s4, 0x55d4
sw v0, (s3)
addiu v0, zero, -1
lw a0, 0x24(sp)
lw v1, (s0)
bne a0, v1, 0x5644
lw ra, 0x3c(sp)
lw s4, 0x38(sp)
lw s3, 0x34(sp)
lw s2, 0x30(sp)
lw s1, 0x2c(sp)
lw s0, 0x28(sp)
jr ra
addiu sp, sp, 0x40
addiu v0, sp, 0x44
lw t9, -sym.vasnmprintf(gp)
lui a1, 0x7fff
sw v0, 0x20(sp)
sw v0, 0x10(sp)
move a3, s2
move a2, zero
ori a1, a1, 0xffff
bal sym.vasnmprintf
addiu a0, s1, 0x6620
lw gp, 0x18(sp)
b 0x55a8
addiu v0, zero, -1
beqz s4, 0x55a8
move v0, zero
lw a0, -0x7fd4(gp)
lw t9, -sym.run_err(gp)
move a1, s4
bal sym.run_err
addiu a0, a0, 0x4198
lw gp, 0x18(sp)
lw t9, -sym.imp.free(gp)
--
lw a1, -0x7fd4(gp)
lb s0, (s5)
beqz s0, 0x5838
lw ra, 0x34(sp)
lw t9, -sym.imp.__ctype_b_loc(gp)
bltz s0, 0x57f4
addiu s5, s5, 1
jalr t9
nop
lw v0, (v0)
sll v1, s0, 1
addu v0, v0, v1
lw gp, 0x10(sp)
lhu v0, (v0)
andi v0, v0, 0xc00
bnez v0, 0x579c
slti v1, s0, 0x24
bnez v1, 0x578c
slti v0, s0, 0x22
beql s0, s3, 0x57f8
lw v0, -0x7bc0(gp)
bnel s0, s2, 0x57a0
lb s0, (s5)
lw v0, -0x7bc0(gp)
lw a1, -0x7fd4(gp)
lw t9, -sym.fmprintf(gp)
lw a0, (v0)
move a2, s4
bal sym.fmprintf
addiu a1, a1, 0x2934
lw ra, 0x34(sp)
lw s5, 0x30(sp)
lw s4, 0x2c(sp)
lw s3, 0x28(sp)
lw s2, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
move v0, zero
jr ra
addiu sp, sp, 0x38
lw s5, 0x30(sp)
lw s4, 0x2c(sp)
lw s3, 0x28(sp)
lw s2, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
--
jalr t9
lw a0, (v0)
lw gp, 0x28(sp)
move a2, v0
lw v0, 0x4c(sp)
lw t9, -sym.run_err(gp)
move a1, s0
bal sym.run_err
addiu a0, v0, 0x3d04
b 0x5f00
lw gp, 0x28(sp)
lw v0, -obj.remout(gp)
lw a1, (s5)
lw t9, 0x60(sp)
lw a0, (v0)
sw v0, 0x34(sp)
addiu a3, sp, 0xb8
jalr t9
addiu a2, sp, 0xb0
bltz v0, 0x5ef0
lw gp, 0x28(sp)
b 0x5b78
lw s6, 0x88(sp)
lw v0, -0x7bc0(gp)
lw a1, -0x7fd4(gp)
lw t9, -sym.fmprintf(gp)
lw a0, (v0)
move a2, s1
bal sym.fmprintf
addiu a1, a1, 0x2994
b 0x5bc4
lw gp, 0x28(sp)
b 0x5b58
move s7, s0
lw v0, 0x38(sp)
beqz v0, 0x6084
lw t9, -sym.imp.strerror(gp)
jalr t9
lw a0, 0x38(sp)
lw gp, 0x28(sp)
move a2, v0
lw v0, 0x4c(sp)
lw t9, -sym.run_err(gp)
move a1, s0
bal sym.run_err
addiu a0, v0, 0x3d04
--
addiu s4, sp, 0x54
addiu v0, v0, 0x42d0
addiu fp, sp, 0x5c
b 0x63c0
sw v0, 0x40(sp)
lw a0, 0x54(sp)
beqz a0, 0x6268
lw t9, -sym.okname(gp)
bal sym.okname
nop
beqz v0, 0x6650
lw gp, 0x20(sp)
lw v0, 0x58(sp)
beqz v0, 0x6670
lw v0, -obj.throughlocal(gp)
lw v0, (v0)
beqz v0, 0x643c
lw v0, 0x74(sp)
lw v0, 0x5c(sp)
addiu a0, zero, 0x2d
lb a1, (v0)
beq a1, a0, 0x6298
lw a3, 0x48(sp)
lw a3, 0x3c(sp)
lw a1, -0x7fd4(gp)
lw t9, -sym.xasprintf(gp)
lw a2, -obj.cmd(gp)
addiu s6, sp, 0x60
addiu a1, a1, 0x29dc
move a0, s6
lw s3, -obj.remout(gp)
lw s2, -obj.remin(gp)
bal sym.xasprintf
sw v0, 0x10(sp)
lw gp, 0x20(sp)
lw a3, 0x60(sp)
lw a2, 0x70(sp)
lw t9, -sym.do_cmd(gp)
lw a1, 0x54(sp)
lw a0, 0x58(sp)
sw s3, 0x14(sp)
bal sym.do_cmd
sw s2, 0x10(sp)
bltz v0, 0x68b0
lw gp, 0x20(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x60(sp)
lw v0, 0x6c(sp)
addiu a0, zero, 0x2d
lb a1, (v0)
beq a1, a0, 0x676c
lw gp, 0x20(sp)
lw a3, 0x3c(sp)
lw v1, 0x44(sp)
lw t9, -sym.xasprintf(gp)
lw a2, -obj.cmd(gp)
addiu a1, v1, 0x29e8
move a0, s6
bal sym.xasprintf
sw v0, 0x10(sp)
lw gp, 0x20(sp)
lw t4, (s3)
lw v0, (s2)
lw t9, -sym.do_cmd2(gp)
lw a3, 0x60(sp)
lw a2, 0x74(sp)
lw a1, 0x64(sp)
lw a0, 0x68(sp)
sw t4, 0x14(sp)
bal sym.do_cmd2
sw v0, 0x10(sp)
bltz v0, 0x68b0
lw gp, 0x20(sp)
lw t9, -sym.imp.free(gp)
jalr t9
--
beqz v0, 0x639c
lw gp, 0x20(sp)
lw v0, -obj.errs(gp)
addiu a0, zero, 1
b 0x639c
sw a0, (v0)
lw s2, -obj.errs(gp)
lw t9, -0x7f7c(gp)
addiu a1, zero, 1
bal 0x1d880
lw a0, (s2)
lw gp, 0x20(sp)
b 0x639c
sw v0, (s2)
lw s2, -obj.remin(gp)
addiu v0, zero, -1
lw a0, (s2)
bne a0, v0, 0x6708
lw v0, 0x6c(sp)
addiu a0, zero, 0x2d
lb a1, (v0)
beq a1, a0, 0x6698
lw a3, 0x48(sp)
lw a3, 0x3c(sp)
lw v1, 0x44(sp)
lw t9, -sym.xasprintf(gp)
lw a2, -obj.cmd(gp)
addiu a1, v1, 0x29e8
addiu a0, sp, 0x60
bal sym.xasprintf
sw v0, 0x10(sp)
lw gp, 0x20(sp)
lw a3, 0x60(sp)
lw a2, 0x74(sp)
lw v0, -obj.remout(gp)
lw t9, -sym.do_cmd(gp)
lw a1, 0x64(sp)
lw a0, 0x68(sp)
sw v0, 0x14(sp)
bal sym.do_cmd
sw s2, 0x10(sp)
bltz v0, 0x68b0
lw gp, 0x20(sp)
lw t9, -sym.response(gp)
bal sym.response
nop
bltz v0, 0x68b0
lw gp, 0x20(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x60(sp)
lw gp, 0x20(sp)
lw t9, -sym.source(gp)
move a1, s0
bal sym.source
addiu a0, zero, 1
b 0x639c
lw gp, 0x20(sp)
lw v0, -0x7bc0(gp)
lw a1, -0x7fd4(gp)
lw t9, -sym.fmprintf(gp)
lw a2, (s0)
lw a0, (v0)
lw s2, -obj.errs(gp)
bal sym.fmprintf
addiu a1, a1, 0x29b4
lw gp, 0x20(sp)
lw a0, (s2)
lw t9, -0x7f7c(gp)
bal 0x1d880
addiu a1, zero, 1
lw gp, 0x20(sp)
b 0x639c
sw v0, (s2)
lw a3, 0x3c(sp)
b 0x6604
move a2, a3
b 0x6310
lw a3, 0x48(sp)
lw v0, -0x7bc0(gp)
lw a1, -0x7fd4(gp)
lw s0, -obj.errs(gp)
lw a2, (fp)
lw a0, (v0)
lw t9, -sym.fmprintf(gp)
addiu a1, a1, 0x29b4
bal sym.fmprintf
nop
lw gp, 0x20(sp)
lw a0, (s0)
lw t9, -0x7f7c(gp)
bal 0x1d880
addiu a1, zero, 1
lw gp, 0x20(sp)
sw v0, (s0)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x64(sp)
lw gp, 0x20(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x68(sp)
lw gp, 0x20(sp)
lw t9, -sym.imp.free(gp)
jalr t9
--
bne v1, v0, 0x68bc
lw ra, 0xac(sp)
lw fp, 0xa8(sp)
lw s7, 0xa4(sp)
lw s6, 0xa0(sp)
lw s5, 0x9c(sp)
lw s4, 0x98(sp)
lw s3, 0x94(sp)
lw s2, 0x90(sp)
lw s1, 0x8c(sp)
lw s0, 0x88(sp)
jr ra
addiu sp, sp, 0xb0
lw a0, (fp)
move a3, s7
move a2, s6
bal sym.parse_user_host_path
move a1, s5
bne v0, s2, 0x61d0
lw gp, 0x20(sp)
lw v0, -0x7bc0(gp)
lw a1, -0x7fd4(gp)
lw s0, -obj.errs(gp)
lw a2, (fp)
lw a0, (v0)
lw t9, -sym.fmprintf(gp)
b 0x6790
addiu a1, a1, 0x29c8
lw s0, -obj.errs(gp)
lw t9, -0x7f7c(gp)
addiu a1, zero, 1
bal 0x1d880
lw a0, (s0)
lw gp, 0x20(sp)
b 0x67b4
sw v0, (s0)
lw t9, -sym.imp.exit(gp)
jalr t9
addiu a0, zero, 1
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lw a1, -0x7fd4(gp)
addiu v0, v0, 0x29f4
lw a0, -0x7fd4(gp)
sw v0, 0x18(sp)
--
lw v0, -obj.remout(gp)
lw t9, -0x7f98(gp)
lw a1, (s2)
lw a0, (v0)
sw v0, 0x28(sp)
addiu a3, s3, 0x48
addiu t9, t9, 0x51b8
bal 0x51b8
addiu a2, s3, 0x40
bgez v0, 0x6994
lw gp, 0x20(sp)
lw t9, -sym.imp.closedir(gp)
jalr t9
move a0, s1
b 0x6b74
lw gp, 0x20(sp)
lw t9, -sym.run_err(gp)
lw a0, 0x34(sp)
move a2, s0
bal sym.run_err
move a1, s4
b 0x6a50
lw gp, 0x20(sp)
lw v0, -0x7bc0(gp)
lw a1, -0x7fd4(gp)
lw t9, -sym.fmprintf(gp)
lw a0, (v0)
move a2, s3
bal sym.fmprintf
addiu a1, a1, 0x2a80
b 0x69dc
lw gp, 0x20(sp)
b 0x697c
move s0, s4
lw t9, -sym.imp.__errno_location(gp)
jalr t9
nop
lw gp, 0x20(sp)
lw t9, -sym.imp.strerror(gp)
jalr t9
lw a0, (v0)
lw gp, 0x20(sp)
move a2, v0
move a1, s4
lw a0, -0x7fd4(gp)
lw t9, -sym.run_err(gp)
--
addiu a2, v0, 0x3674
move s3, zero
b 0x6dec
lw gp, 0x20(sp)
lw v0, 0xe8(sp)
andi v0, v0, 0xf000
xori v0, v0, 0x4000
sltiu v0, v0, 1
b 0x6d7c
sw v0, 0x70(sp)
lw v0, -obj.iamremote(gp)
lw v0, (v0)
beqz v0, 0x7420
lw a3, -0x7fd4(gp)
addiu v0, zero, 2
beq v1, v0, 0x79d0
lw s0, -obj.errs(gp)
lw t9, -0x7f7c(gp)
addiu a1, zero, 1
lw a0, (s0)
bal 0x1d880
move s3, zero
lw gp, 0x20(sp)
b 0x6dec
sw v0, (s0)
lw t9, -sym.fmprintf(gp)
lw a2, 0x2c(sp)
lw a0, (v0)
lw v0, 0x58(sp)
bal sym.fmprintf
addiu a1, v0, 0x2c80
b 0x6ea8
lw gp, 0x20(sp)
addiu v0, v1, -0x43
andi v0, v0, 0xff
sltiu v0, v0, 2
beqz v0, 0x83d8
lb a0, 0x175(sp)
addiu v1, sp, 0x175
addiu v0, a0, -0x30
andi v0, v0, 0xff
sltiu v0, v0, 8
beqz v0, 0x846c
sw v1, 0xac(sp)
lw t9, -0x7f7c(gp)
bal 0x1d880
--
bnez a1, 0x7818
lw v0, 0xe8(sp)
addiu v1, zero, 0x4000
andi v0, v0, 0xf000
beq v0, v1, 0x77c0
lw v0, 0x5c(sp)
lw t9, -sym.imp.__errno_location(gp)
jalr t9
nop
addiu v1, zero, 0x14
lw gp, 0x20(sp)
addiu a0, zero, 0x14
sw v1, (v0)
lw t9, -sym.imp.strerror(gp)
jalr t9
move s3, zero
lw gp, 0x20(sp)
lw a1, 0x3c(sp)
move a2, v0
lw a0, -0x7fd4(gp)
lw t9, -sym.run_err(gp)
bal sym.run_err
addiu a0, a0, 0x3d04
b 0x6dec
lw gp, 0x20(sp)
lw t9, -sym.snmprintf(gp)
addiu s0, sp, 0x974
addiu v0, sp, 0x175
addiu a3, a3, 0x4198
move a2, zero
addiu a1, zero, 0x800
move a0, s0
bal sym.snmprintf
sw v0, 0x10(sp)
lw gp, 0x20(sp)
lw t9, -sym.imp.strlen(gp)
jalr t9
move a0, s0
lw gp, 0x20(sp)
move a3, v0
move a2, s0
lw t9, -sym.atomicio(gp)
lw a0, -0x7b1c(gp)
bal sym.atomicio
addiu a1, zero, 2
lw gp, 0x20(sp)
--
sw a0, 0x38(sp)
sw v1, 0x28(sp)
move a0, zero
addiu s7, sp, 0x54
addiu s6, sp, 0x48
addiu s5, sp, 0x50
addiu fp, sp, 0x4c
b 0x8854
sw v0, 0x3c(sp)
lw a0, 0x50(sp)
beqz a0, 0x8794
lw t9, -sym.okname(gp)
bal sym.okname
nop
beqz v0, 0x89b0
lw gp, 0x18(sp)
lw v0, 0x48(sp)
beqz v0, 0x88d0
lw v0, 0x4c(sp)
addiu v1, zero, 0x2d
lb a0, (v0)
beq a0, v1, 0x87b4
lw a3, 0x30(sp)
lw a3, 0x2c(sp)
lw v1, 0x24(sp)
lw t9, -sym.xasprintf(gp)
lw a2, -obj.cmd(gp)
addiu a1, v1, 0x29dc
addiu a0, sp, 0x44
lw s2, -obj.remout(gp)
lw s1, -obj.remin(gp)
bal sym.xasprintf
sw v0, 0x10(sp)
lw gp, 0x18(sp)
lw a3, 0x44(sp)
lw a2, 0x54(sp)
lw t9, -sym.do_cmd(gp)
lw a1, 0x50(sp)
lw a0, 0x48(sp)
sw s2, 0x14(sp)
bal sym.do_cmd
sw s1, 0x10(sp)
bltz v0, 0x8a48
lw gp, 0x18(sp)
lw t9, -sym.imp.free(gp)
jalr t9
--
lw fp, 0x88(sp)
lw s7, 0x84(sp)
lw s6, 0x80(sp)
lw s5, 0x7c(sp)
lw s4, 0x78(sp)
lw s3, 0x74(sp)
lw s2, 0x70(sp)
lw s1, 0x6c(sp)
lw s0, 0x68(sp)
jr ra
addiu sp, sp, 0x90
lw t9, -sym.imp.free(gp)
lw s1, -obj.errs(gp)
jalr t9
lw a0, 0x44(sp)
lw gp, 0x18(sp)
lw a0, (s1)
lw t9, -0x7f7c(gp)
bal 0x1d880
addiu a1, zero, 1
lw gp, 0x18(sp)
b 0x8848
sw v0, (s1)
lw v0, -0x7bc0(gp)
lw a1, -0x7fd4(gp)
lw t9, -sym.fmprintf(gp)
lw a2, (s0)
lw a0, (v0)
lw s1, -obj.errs(gp)
bal sym.fmprintf
addiu a1, a1, 0x29b4
b 0x8a5c
lw gp, 0x18(sp)
b 0x89d8
move a0, zero
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
nop
nop
nop
lui gp, 3
addiu gp, gp, 0x55b0
addu gp, gp, t9
lw v0, -0x7f6c(gp)
addiu v1, zero, 1
--
move a1, t1
move a2, v0
bal 0x1f790
move a3, v1
lw gp, 0x30(sp)
move a0, v0
lw t9, -0x7e70(gp)
bal 0x21810
move a1, v1
lw gp, 0x30(sp)
move t0, v0
lw s0, -0x7f6c(gp)
lw t9, -0x7f7c(gp)
sw t0, 0x664c(fp)
lw v0, 0x6648(s0)
sb zero, 0x78(sp)
sw v0, 0x48(sp)
addiu a1, zero, -0x24
bal 0x1d880
move a0, v0
sw v0, 0x74(sp)
blez v0, 0x8e9c
lw gp, 0x30(sp)
lw v1, -0x7f6c(gp)
lw a3, -0x7fd4(gp)
lw t9, -sym.snmprintf(gp)
lw v1, 0x6670(v1)
sw v0, 0x10(sp)
addiu v0, zero, 0xd
sw v1, 0x14(sp)
addiu a3, a3, 0x30e4
addiu a2, sp, 0x74
addiu a1, zero, segment.REGINFO
addiu a0, sp, 0x79
bal sym.snmprintf
sb v0, 0x78(sp)
lw v0, 0x6648(s0)
lw gp, 0x30(sp)
lw s6, 0x6660(s5)
lw s7, 0x6664(s5)
sw v0, 0x48(sp)
or v0, s6, s7
beql v0, zero, 0x8f2c
addiu s7, zero, 0x64
lw a0, 0x6658(s1)
beq a0, s6, 0x8f20
--
addiu sp, sp, 0x30
lw v0, -0x7fd4(gp)
lw a1, -0x7fd4(gp)
addiu v0, v0, 0x3484
lw a0, -0x7fd4(gp)
sw v0, 0x18(sp)
lw t9, -sym.sshfatal(gp)
addiu v0, zero, 1
sw zero, 0x14(sp)
sw v0, 0x10(sp)
move a3, zero
addiu a2, zero, 0x69
addiu a1, a1, 0x34b0
bal sym.sshfatal
addiu a0, a0, 0x3354
lui gp, 3
addiu gp, gp, 0x2854
addu gp, gp, t9
addiu sp, sp, -0x28
addiu v0, sp, 0x30
sw s0, 0x20(sp)
lw s0, -0x7bfc(gp)
sw gp, 0x10(sp)
sw ra, 0x24(sp)
lw v1, (s0)
lw t9, -sym.xvasprintf(gp)
sw a2, 0x30(sp)
sw v1, 0x1c(sp)
sw a3, 0x34(sp)
sw v0, 0x18(sp)
bal sym.xvasprintf
move a2, v0
lw a0, 0x1c(sp)
lw v1, (s0)
bne a0, v1, 0xb880
lw gp, 0x10(sp)
lw ra, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x28
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
nop
lui gp, 3
addiu gp, gp, 0x27e0
--
lw t9, -sym.imp.strlen(gp)
jalr t9
move a0, s3
bnez v0, 0xef40
lw gp, 0x20(sp)
lw a3, -0x7fd4(gp)
addiu a3, a3, 0x35a8
b 0xeeb4
addiu s0, s1, 1
lw t9, -sym.imp.getpwuid(gp)
jalr t9
move a0, s3
beqz v0, 0xefa8
lw gp, 0x20(sp)
lw s3, 0x14(v0)
lw t9, -sym.imp.strlen(gp)
jalr t9
move a0, s3
bnez v0, 0xef20
lw gp, 0x20(sp)
lw a3, -0x7fd4(gp)
addiu a3, a3, 0x35a8
bnel s1, zero, 0xeeb4
addiu s0, s1, 1
lw a1, -0x7fd4(gp)
lw t9, -sym.xasprintf(gp)
sw s0, 0x10(sp)
move a2, s3
addiu a1, a1, 0x2cac
bal sym.xasprintf
addiu a0, sp, 0x28
slti v0, v0, 0x1000
beqz v0, 0xef70
lw gp, 0x20(sp)
lw v0, 0x28(sp)
lw a0, 0xac(sp)
lw v1, (s2)
bne a0, v1, 0xef64
lw ra, 0xc4(sp)
lw s4, 0xc0(sp)
lw s3, 0xbc(sp)
lw s2, 0xb8(sp)
lw s1, 0xb4(sp)
lw s0, 0xb0(sp)
jr ra
addiu sp, sp, 0xc8
--
jr ra
addiu sp, sp, 0x48
lw a0, -0x7fd4(gp)
lw t9, -sym.xstrdup(gp)
bal sym.xstrdup
addiu a0, a0, 0x3c04
move s4, v0
b 0xf4e8
lw gp, 0x18(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, -0x14d8
addu gp, gp, t9
addiu sp, sp, -0x40
move v1, a2
sw s1, 0x34(sp)
lw s1, -0x7bfc(gp)
sw gp, 0x18(sp)
sw s2, 0x38(sp)
sw s0, 0x30(sp)
sw ra, 0x3c(sp)
lw v0, (s1)
addiu a2, sp, 0x4c
lw t9, -sym.xvasprintf(gp)
move s0, a0
sw a2, 0x20(sp)
move s2, a1
sw a3, 0x4c(sp)
move a1, v1
addiu a0, sp, 0x24
sw v0, 0x2c(sp)
bal sym.xvasprintf
nop
lw a2, (s0)
beqz a2, 0xf634
lw gp, 0x18(sp)
lb v0, (a2)
beqz v0, 0xf638
lw t9, -sym.imp.free(gp)
beql s2, zero, 0xf650
lw s2, -0x7fd4(gp)
lw a1, -0x7fd4(gp)
lw v0, 0x24(sp)
lw t9, -sym.xasprintf(gp)
move a3, s2
addiu a1, a1, 0x2cac
addiu a0, sp, 0x28
bal sym.xasprintf
sw v0, 0x10(sp)
lw gp, 0x18(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x24(sp)
lw gp, 0x18(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, (s0)
lw v0, 0x28(sp)
lw gp, 0x18(sp)
sw v0, (s0)
lw v1, 0x2c(sp)
lw v0, (s1)
bne v1, v0, 0xf658
lw ra, 0x3c(sp)
--
lw a0, -0x7fd4(gp)
sw gp, 0x20(sp)
sw s0, 0x2c(sp)
sw ra, 0x34(sp)
addiu a0, a0, 0x3c40
jalr t9
move s0, a1
beqz v0, 0x10518
lw gp, 0x20(sp)
sw v0, 0x14(sp)
lw v0, -0x7fd4(gp)
lw t9, -sym.imp.__snprintf_chk(gp)
addiu v0, v0, 0x3c60
sw v0, 0x10(sp)
addiu a3, zero, -1
addiu a2, zero, 1
move a1, s0
jalr t9
move a0, s1
blez v0, 0x10518
lw gp, 0x20(sp)
sltu v0, v0, s0
bnez v0, 0x10540
lw ra, 0x34(sp)
lw a2, -0x7fd4(gp)
lw t9, -sym.imp.snprintf(gp)
move a1, s0
addiu a2, a2, 0x3c48
move a0, s1
jalr t9
sltiu s0, s0, 0x16
bnez s0, 0x10550
lw gp, 0x20(sp)
lw ra, 0x34(sp)
lw s1, 0x30(sp)
lw s0, 0x2c(sp)
jr ra
addiu sp, sp, 0x38
lw v0, -0x7fd4(gp)
lw a1, -0x7fd4(gp)
addiu v0, v0, 0x3c74
lw a0, -0x7fd4(gp)
sw v0, 0x18(sp)
lw t9, -sym.sshfatal(gp)
addiu v0, zero, 1
sw zero, 0x14(sp)
--
beqz s3, 0x118b4
lw t9, -sym.imp.strcmp(gp)
move a1, s0
jalr t9
addiu a0, sp, 0x10cc
beqz v0, 0x11914
lw gp, 0x20(sp)
lw t9, -sym.imp.strcmp(gp)
move a1, s0
jalr t9
move a0, s1
beqz v0, 0x11914
lw gp, 0x20(sp)
lw t9, -sym.imp.strcmp(gp)
move a1, s0
jalr t9
move a0, s2
beqz v0, 0x11914
lw gp, 0x20(sp)
lw t9, -sym.imp.dirname(gp)
jalr t9
move a0, s0
bnez v0, 0x1182c
lw gp, 0x20(sp)
lw a2, -0x7fd4(gp)
lw t9, -sym.imp.snprintf(gp)
lw a1, 0x210c(sp)
addiu a2, a2, 0x3e50
jalr t9
move a0, s6
lw gp, 0x20(sp)
addiu v0, zero, -1
lw a0, 0x20cc(sp)
lw v1, (s5)
bne a0, v1, 0x11a10
lw ra, 0x20f4(sp)
lw s7, 0x20f0(sp)
lw s6, 0x20ec(sp)
lw s5, 0x20e8(sp)
lw s4, 0x20e4(sp)
lw s3, 0x20e0(sp)
lw s2, 0x20dc(sp)
lw s1, 0x20d8(sp)
lw s0, 0x20d4(sp)
jr ra
addiu sp, sp, 0x20f8
--
sb zero, (s4)
lw v0, 0x30(sp)
sw s5, (v0)
lw v0, 0x1c(sp)
beqz v0, 0x14278
lw v1, 0x18(sp)
sw v1, (v0)
b 0x13f9c
addiu s1, zero, -1
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, -0x621c
addu gp, gp, t9
addiu sp, sp, -0x48
addiu v0, sp, 0x58
sw s0, 0x34(sp)
lw s0, -0x7bfc(gp)
sw gp, 0x18(sp)
sw s3, 0x40(sp)
sw s2, 0x3c(sp)
sw s1, 0x38(sp)
sw ra, 0x44(sp)
lw v1, (s0)
lw t9, -sym.vasnmprintf(gp)
move s2, a0
sw v0, 0x10(sp)
addiu a0, sp, 0x28
sw v1, 0x2c(sp)
sw zero, 0x28(sp)
sw v0, 0x24(sp)
bal sym.vasnmprintf
move s3, a1
lw a1, 0x28(sp)
lw gp, 0x18(sp)
beqz a1, 0x14344
move s1, v0
lw t9, -sym.strlcpy(gp)
move a2, s3
bal sym.strlcpy
move a0, s2
lw gp, 0x18(sp)
lw t9, -sym.imp.free(gp)
jalr t9
lw a0, 0x28(sp)
--
lw v1, (s0)
bne a0, v1, 0x1434c
move v0, s1
lw ra, 0x44(sp)
lw s3, 0x40(sp)
lw s2, 0x3c(sp)
lw s1, 0x38(sp)
lw s0, 0x34(sp)
jr ra
addiu sp, sp, 0x48
b 0x14318
sb zero, (s2)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, -0x62e8
addu gp, gp, t9
addiu sp, sp, -0x30
addiu v0, sp, 0x40
sw s0, 0x28(sp)
lw s0, -0x7bfc(gp)
sw gp, 0x18(sp)
sw ra, 0x2c(sp)
lw v1, (s0)
lw t9, -sym.vasnmprintf(gp)
sw v0, 0x10(sp)
sw v1, 0x24(sp)
sw zero, (a0)
bal sym.vasnmprintf
sw v0, 0x20(sp)
lw a0, 0x24(sp)
lw v1, (s0)
bne a0, v1, 0x143b8
lw gp, 0x18(sp)
lw ra, 0x2c(sp)
lw s0, 0x28(sp)
jr ra
addiu sp, sp, 0x30
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, -0x6354
addu gp, gp, t9
addiu sp, sp, -0x38
move a3, a1
sw s1, 0x2c(sp)
lw s1, -0x7bfc(gp)
sw gp, 0x18(sp)
sw s2, 0x30(sp)
sw ra, 0x34(sp)
sw s0, 0x28(sp)
lw v0, (s1)
lw t9, -sym.vasnmprintf(gp)
lui a1, 0x7fff
sw a2, 0x10(sp)
move s2, a0
move a2, zero
ori a1, a1, 0xffff
addiu a0, sp, 0x20
sw v0, 0x24(sp)
sw zero, 0x20(sp)
bal sym.vasnmprintf
nop
bltz v0, 0x14484
lw gp, 0x18(sp)
lw t9, -sym.imp.fputs(gp)
lw a0, 0x20(sp)
move a1, s2
jalr t9
move s0, v0
lw gp, 0x18(sp)
lw a0, 0x20(sp)
nor v0, zero, v0
--
lw ra, 0x34(sp)
lw s2, 0x30(sp)
lw s1, 0x2c(sp)
lw s0, 0x28(sp)
jr ra
addiu sp, sp, 0x38
lw t9, -sym.imp.free(gp)
lw a0, 0x20(sp)
jalr t9
addiu s0, zero, -1
b 0x1445c
lw gp, 0x18(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, -0x6438
addu gp, gp, t9
addiu sp, sp, -0x28
addiu v0, sp, 0x30
sw s0, 0x20(sp)
lw s0, -0x7bfc(gp)
sw gp, 0x10(sp)
sw ra, 0x24(sp)
lw v1, (s0)
lw t9, -sym.vfmprintf(gp)
sw a2, 0x30(sp)
sw v1, 0x1c(sp)
sw a3, 0x34(sp)
sw v0, 0x18(sp)
bal sym.vfmprintf
move a2, v0
lw a0, 0x1c(sp)
lw v1, (s0)
bne a0, v1, 0x1450c
lw gp, 0x10(sp)
lw ra, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x28
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, -0x64a8
addu gp, gp, t9
addiu sp, sp, -0x28
addiu v0, sp, 0x2c
sw s0, 0x20(sp)
lw s0, -0x7bfc(gp)
sw a1, 0x2c(sp)
move a1, a0
lw a0, -0x7c50(gp)
sw gp, 0x10(sp)
sw ra, 0x24(sp)
lw v1, (s0)
lw a0, (a0)
lw t9, -sym.vfmprintf(gp)
sw a2, 0x30(sp)
sw v1, 0x1c(sp)
sw a3, 0x34(sp)
sw v0, 0x18(sp)
bal sym.vfmprintf
move a2, v0
lw a0, 0x1c(sp)
lw v1, (s0)
bne a0, v1, 0x1458c
lw gp, 0x10(sp)
lw ra, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x28
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, -0x6528
addu gp, gp, t9
[*] Function printf used 32 times scp.openssh
