[*] Binary protection state of syslog-ng-ctl
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of syslog-ng-ctl
move s1, a0
lw a0, 0x4508(s0)
sw gp, 0x10(sp)
sw ra, 0x24(sp)
bal sym.control_client_connect
nop
beqz v0, 0x1d38
lw gp, 0x10(sp)
lw t9, -sym.control_client_send_command(gp)
lw a0, 0x4508(s0)
bal sym.control_client_send_command
move a1, s1
nor v0, zero, v0
srl v0, v0, 0x1f
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
lui gp, 2
addiu gp, gp, -0x59fc
addu gp, gp, t9
addiu sp, sp, -0x28
move a1, a0
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
sw gp, 0x10(sp)
sw ra, 0x24(sp)
sw s0, 0x18(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
jalr t9
addiu a0, a0, 0x36f4
lw gp, 0x10(sp)
move a0, v0
lw t9, -0x7fdc(gp)
addiu t9, t9, 0x1ce0
bal 0x1ce0
move s0, v0
beqz v0, 0x1e70
lw gp, 0x10(sp)
lw v0, -0x7fd4(gp)
lw t9, -sym.control_client_read_reply(gp)
bal sym.control_client_read_reply
lw a0, 0x4508(v0)
move s1, v0
--
lw t9, -sym.imp.g_str_equal(gp)
addiu a1, a1, str.list
jalr t9
move a0, s1
beqz v0, 0x24f4
lw gp, 0x10(sp)
lw v0, -0x7fd4(gp)
lw v0, 0x44e8(v0)
bnez v0, 0x258c
lw v0, -0x7fd4(gp)
lw a1, 0x44e0(s0)
lw s1, 0x44e4(v0)
lw v0, (a1)
beqz v0, 0x2458
sltu s1, zero, s1
addiu a1, a1, 4
sw a1, 0x44e0(s0)
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.g_strjoinv(gp)
jalr t9
addiu a0, a0, 0x36a8
lw gp, 0x10(sp)
sll s1, s1, 2
move s2, v0
lw a1, -0x7fd4(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a1, a1, 0x3fe8
beqz v0, 0x25c4
lwx a1, s1(a1)
lw a0, -0x7fdc(gp)
move a2, v0
jalr t9
addiu a0, a0, str.QUERY__s__s
lw gp, 0x10(sp)
move s0, v0
lw t9, -sym.imp.g_free(gp)
jalr t9
move a0, s2
beqz s0, 0x258c
lw gp, 0x10(sp)
lw t9, -0x7fdc(gp)
addiu t9, t9, 0x1d4c
bal 0x1d4c
move a0, s0
lw gp, 0x10(sp)
move a0, s0
--
b 0x24a0
lw gp, 0x10(sp)
beqz v1, 0x2550
addiu a1, a1, 4
sw a1, 0x44e0(s0)
b 0x2544
addiu s1, zero, 4
beqz v1, 0x2458
addiu s1, zero, 3
addiu a1, a1, 4
b 0x2458
sw a1, 0x44e0(s0)
lui gp, 2
addiu gp, gp, -0x62b4
addu gp, gp, t9
addiu sp, sp, -0x130
lw v0, -0x7fd4(gp)
sw s0, 0x124(sp)
lw s0, -0x7ec0(gp)
lw v0, 0x44dc(v0)
sw gp, 0x10(sp)
lw v1, (s0)
sw s1, 0x128(sp)
sw ra, 0x12c(sp)
sw v1, 0x11c(sp)
lw t9, -sym.imp.g_snprintf(gp)
beqz v0, 0x26e0
addiu s1, sp, 0x1c
lw a2, -0x7fdc(gp)
addiu a1, zero, 0xff
addiu a2, a2, str.LICENSE_JSON_n
jalr t9
move a0, s1
lw gp, 0x10(sp)
lw t9, -0x7fdc(gp)
addiu t9, t9, 0x1ce0
bal 0x1ce0
move a0, s1
bnez v0, 0x2698
lw gp, 0x10(sp)
addiu v0, zero, 1
lw a0, 0x11c(sp)
lw v1, (s0)
bne a0, v1, 0x2718
lw ra, 0x12c(sp)
lw s1, 0x128(sp)
--
addiu sp, sp, -0x140
sw s2, 0x134(sp)
sw s1, 0x130(sp)
lw s2, -0x7fd4(gp)
lw s1, -0x7ec0(gp)
sw s0, 0x12c(sp)
lw s0, 0x44f8(s2)
lw v0, (s1)
sw gp, 0x18(sp)
sw s3, 0x138(sp)
sw ra, 0x13c(sp)
move s3, a2
sw v0, 0x124(sp)
beqz s0, 0x294c
lw a1, -0x7fdc(gp)
lw t9, -sym.imp.strncasecmp(gp)
addiu a2, zero, 2
addiu a1, a1, 0x36f8
jalr t9
move a0, s0
bnez v0, 0x2918
lw gp, 0x18(sp)
lw v0, -0x7fdc(gp)
addiu v0, v0, 0x36e8
lw a2, -0x7fdc(gp)
lw t9, -sym.imp.g_snprintf(gp)
addiu s0, sp, 0x24
sw v0, 0x10(sp)
move a3, s3
addiu a2, a2, str.LOG__s__s_n
addiu a1, zero, 0xff
jalr t9
move a0, s0
lw gp, 0x18(sp)
lw t9, -sym.imp.g_strup(gp)
jalr t9
move a0, s0
lw gp, 0x18(sp)
lw t9, -0x7fdc(gp)
addiu t9, t9, 0x1ce0
bal 0x1ce0
move a0, s0
beqz v0, 0x2930
lw gp, 0x18(sp)
lw v0, -0x7fd4(gp)
lw t9, -sym.control_client_read_reply(gp)
--
lw v1, (s1)
bne a0, v1, 0x2974
move v0, s2
lw ra, 0x13c(sp)
lw s3, 0x138(sp)
lw s2, 0x134(sp)
lw s1, 0x130(sp)
lw s0, 0x12c(sp)
jr ra
addiu sp, sp, 0x140
lb v1, (s0)
addiu v0, zero, 0x31
beq v1, v0, 0x2840
lw v0, -0x7fdc(gp)
b 0x2848
addiu v0, v0, 0x36ec
b 0x28ec
addiu s2, zero, 1
lw t9, -sym.imp.puts(gp)
jalr t9
move s2, zero
b 0x28d8
lw gp, 0x18(sp)
move a3, a2
lw a2, -0x7fdc(gp)
lw t9, -sym.imp.g_snprintf(gp)
addiu s0, sp, 0x24
addiu a2, a2, str.LOG__s_n
addiu a1, zero, 0xff
jalr t9
move a0, s0
b 0x2870
lw gp, 0x18(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 2
addiu gp, gp, -0x6630
addu gp, gp, t9
addiu sp, sp, -0x28
lw t1, (a0)
sw gp, 0x10(sp)
slti v0, t1, 2
sw ra, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
--
lw ra, 0x34(sp)
lw t9, -sym.imp.strcmp(gp)
jalr t9
move a1, s1
bnez v0, 0x2ac8
lw gp, 0x18(sp)
lw v0, 0xc(s0)
beqz v0, 0x2b30
lw ra, 0x34(sp)
move v0, s0
lw s3, 0x30(sp)
lw s2, 0x2c(sp)
lw s1, 0x28(sp)
lw s0, 0x24(sp)
jr ra
addiu sp, sp, 0x38
lw s3, 0x30(sp)
lw s2, 0x2c(sp)
lw s1, 0x28(sp)
lw s0, 0x24(sp)
move v0, zero
jr ra
addiu sp, sp, 0x38
lw v0, 0x10(s0)
beqz v0, 0x2b8c
lw t9, -sym.imp.g_string_append_printf(gp)
lw a1, -0x7fdc(gp)
move a2, s1
move a0, s3
jalr t9
addiu a1, a1, 0x36b4
lw gp, 0x18(sp)
lw a2, 0x40(sp)
lw a0, 0x10(s0)
lw t9, -0x7fdc(gp)
move a3, s3
addiu t9, t9, 0x2a64
bal 0x2a64
move a1, s2
lw ra, 0x34(sp)
lw s3, 0x30(sp)
lw s2, 0x2c(sp)
lw s1, 0x28(sp)
lw s0, 0x24(sp)
jr ra
addiu sp, sp, 0x38
[*] Function printf used 6 times syslog-ng-ctl
