[*] Binary protection state of systemlogd

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of systemlogd

sw v0, 0x1c(s0)
move a3, s3
lw a2, -0x7fcc(gp)
lw t9, -sym.imp.g_io_add_watch(gp)
addiu a2, a2, 0x3f60
addiu a1, zero, 1
jalr t9
move a0, v0
lw gp, 0x20(sp)
b 0x48f4
sw v0, 0x20(s0)
lw t9, -sym.imp.g_string_new(gp)
move a0, zero
lw s0, 0x28(v0)
jalr t9
sw s0, 0x2c(sp)
lw gp, 0x20(sp)
move a0, s0
addiu a1, sp, 0x44
lw t9, -sym.imp.g_main_context_unref(gp)
jalr t9
move s0, v0
bltz v0, 0x4d08
lw gp, 0x20(sp)
lw a1, -0x7fc4(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
lw a2, 0x44(sp)
addiu a1, a1, -sym.imp.sd_notify
jalr t9
move a0, s0
lw gp, 0x20(sp)
lw t9, -sym.imp.g_dbus_method_invocation_get_sender(gp)
jalr t9
lw a0, 0x44(sp)
lw gp, 0x20(sp)
lw t9, -sym.imp.sd_journal_get_realtime_usec(gp)
addiu s1, sp, 0x50
lw a0, 0x2c(sp)
jalr t9
move a1, s1
bltz v0, 0x4e78
lw gp, 0x20(sp)
lw a1, -0x7fc4(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
lw a2, 0x50(sp)
lw a3, 0x54(sp)
addiu a1, a1, -0x7858
jalr t9
move a0, s0
lw gp, 0x20(sp)
lw t9, -sym.imp.sd_journal_get_monotonic_usec(gp)
lw a0, 0x2c(sp)
addiu a2, sp, 0x60
jalr t9
move a1, s1
bltz v0, 0x4e3c
lw gp, 0x20(sp)
lw a1, -0x7fc4(gp)
lw t9, -sym.imp.g_string_append_printf(gp)
lw a2, 0x50(sp)
lw a3, 0x54(sp)
addiu a1, a1, -0x7814
jalr t9
move a0, s0
lw gp, 0x20(sp)
lw t9, -sym.imp.sd_journal_restart_data(gp)
lw a0, 0x2c(sp)
jalr t9
addiu s6, sp, 0x4c
lw gp, 0x20(sp)
addiu s7, sp, 0x48
lw fp, -0x7fc4(gp)
addiu v0, fp, -0x77f8
sw v0, 0x3c(sp)
addiu fp, sp, 0x58
lw t9, -sym.imp.g_unichar_iscntrl(gp)
lw a0, 0x2c(sp)
move a2, s6
jalr t9
--
addiu a0, a0, 1
addiu a1, zero, 1
sllv v0, a1, v1
addiu v1, v1, 1
bne v1, a0, 0x5318
or fp, fp, v0
lw t9, -sym.imp.g_strfreev(gp)
jalr t9
move a0, s4
lw gp, 0x18(sp)
addiu s5, s5, 4
lw s4, -4(s5)
bnez s4, 0x5240
lw t9, -sym.imp.strchr(gp)
lw s4, -0x7fc4(gp)
addiu s5, zero, 8
b 0x5364
addiu s4, s4, -0x7690
addiu s2, s2, 1
beq s2, s5, 0x583c
lw t9, -sym.imp.g_strfreev(gp)
srav v0, fp, s2
andi v0, v0, 1
beql v0, zero, 0x535c
addiu s2, s2, 1
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s2
jalr t9
move a0, s4
lw gp, 0x18(sp)
move a2, zero
move a1, v0
lw t9, -sym.imp.sd_journal_add_match(gp)
move a0, s6
jalr t9
move s7, v0
bltz v0, 0x561c
lw gp, 0x18(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s7
b 0x5358
lw gp, 0x18(sp)
lw t9, -sym.imp.g_io_error_quark(gp)
jalr t9
nop

[*] Function printf used 4 times systemlogd