[*] Binary protection state of policykit_system

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of policykit_system

subu a1, s1, s0
jalr t9
move a0, s0
lw gp, 0x20(sp)
move s1, v0
lw a1, -str._ias_(gp)
lw t9, -sym.imp.g_strcanon(gp)
addiu a2, zero, 0x21
addiu a1, a1, -0x1530
jalr t9
move a0, s1
lw gp, 0x20(sp)
addiu a1, zero, 0x21
lw t9, -sym.imp.strchr(gp)
jalr t9
move a0, s1
bnez v0, 0x968c
lw gp, 0x20(sp)
lw t9, -sym.imp.strchr(gp)
addiu a1, zero, 0x40
jalr t9
move a0, s1
lw gp, 0x20(sp)
move s0, v0
beqz v0, 0x9778
lw t9, -sym.imp.g_strdup_printf(gp)
sb zero, (v0)
lw v0, -str._ias_(gp)
lw a0, -str._ias_(gp)
addiu v0, v0, -0x14c0
move a3, s1
sw v0, 0x10(sp)
move a2, s3
move a1, s6
jalr t9
addiu a0, a0, -0x14e4
move s5, v0
addiu v0, zero, 0x40
lw gp, 0x20(sp)
sb v0, (s0)
lw t9, -0x7fd4(gp)
addiu v0, sp, 0x3c
sw v0, 0x34(sp)
move a2, v0
move a1, s5
addiu t9, t9, 0x64d8
--
lw a2, -str._ias_(gp)
lw a1, -str._ias_(gp)
lw t9, -sym.imp.g_return_if_fail_warning(gp)
addiu a2, a2, -0x15a8
addiu a1, a1, -0x230
jalr t9
move a0, zero
lw gp, 0x20(sp)
move v0, zero
lw a0, 0x44(sp)
lw v1, (s2)
bne a0, v1, 0x97a8
lw ra, 0x6c(sp)
lw fp, 0x68(sp)
lw s7, 0x64(sp)
lw s6, 0x60(sp)
lw s5, 0x5c(sp)
lw s4, 0x58(sp)
lw s3, 0x54(sp)
lw s2, 0x50(sp)
lw s1, 0x4c(sp)
lw s0, 0x48(sp)
jr ra
addiu sp, sp, 0x70
lw a0, -str._ias_(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a2, s3
move a1, s1
jalr t9
addiu a0, a0, -0x14b8
move s0, v0
lw v0, 0x30(sp)
addiu s3, sp, 0x40
lw t9, 0x2c(sp)
lw a0, (v0)
move a2, s3
jalr t9
move a1, s0
bnez v0, 0x9498
lw gp, 0x20(sp)
lw t9, -sym.policykit_system_error_quark(gp)
bal sym.policykit_system_error_quark
nop
lw gp, 0x20(sp)
lw v1, 0x40(sp)
lw a2, 0x88(sp)
--
jalr t9
move a0, zero
move s0, zero
lw gp, 0x20(sp)
b 0x9498
move s1, zero
lw v0, -str._ias_(gp)
lw a0, -str._ias_(gp)
addiu v0, v0, -0x750
sw v0, 0x10(sp)
move a3, s1
move a2, s3
move a1, s6
jalr t9
addiu a0, a0, -0x14e4
move s5, v0
b 0x946c
lw gp, 0x20(sp)
lw t9, -sym.imp.__stack_chk_fail(gp)
jalr t9
nop
lui gp, 3
addiu gp, gp, 0x185c
addu gp, gp, t9
addiu sp, sp, -0x48
lw t9, -sym.imp.g_strdup_printf(gp)
sw s2, 0x3c(sp)
move s2, a0
lw a0, -str._ias_(gp)
sw ra, 0x44(sp)
sw s3, 0x40(sp)
sw s1, 0x38(sp)
sw s0, 0x34(sp)
sw gp, 0x20(sp)
move s3, a1
addiu a0, a0, -0x1470
move a1, a2
jalr t9
move s1, a3
lw gp, 0x20(sp)
move a3, v0
move s0, v0
addiu v0, zero, 0x1d
sw v0, 0x18(sp)
lw v0, -sym.policy_kit_system__complete_set_default_target(gp)
lw a2, -str._ias_(gp)
--
sw v0, 0x4c(sp)
lw v0, -str._ias_(gp)
sw gp, 0x28(sp)
addiu v0, v0, -0x13b8
sw s2, 0x58(sp)
sw s0, 0x50(sp)
sw ra, 0x64(sp)
sw s4, 0x60(sp)
move s2, a1
sw zero, 0x44(sp)
sw zero, 0x48(sp)
move a1, a2
addiu a0, a0, -0x16ec
sw zero, 0x34(sp)
sw zero, 0x38(sp)
sw zero, 0x3c(sp)
sw v0, 0x40(sp)
jalr t9
move s0, a2
bnez v0, 0x9d10
lw gp, 0x28(sp)
lw v0, -str._ias_(gp)
addiu v0, v0, -0x13a4
sw v0, 0x44(sp)
lw a0, -str._ias_(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s0
jalr t9
addiu a0, a0, -0x1364
lw gp, 0x28(sp)
addiu s0, sp, 0x34
move a0, s2
lw t9, -0x7fd4(gp)
move a2, s0
addiu t9, t9, 0x64d8
move a1, v0
bal 0x64d8
move s4, v0
lw gp, 0x28(sp)
move a0, s4
beqz v0, 0x9d3c
lw t9, -0x7b20(gp)
jalr t9
nop
lw gp, 0x28(sp)
addiu v0, sp, 0x3c
--
beq v1, a1, 0x1bab4
lw t9, -sym.imp.close(gp)
lbu v0, (v1)
andi v0, v0, 0x3f
beql v0, zero, 0x1ba64
addiu v0, zero, 0x2e
beql v0, a2, 0x1ba64
addiu v0, zero, 0x2f
addiu a0, v0, -2
sltiu a0, a0, 0xa
beql a0, zero, 0x1ba48
addiu a0, v0, -0xc
addiu v0, v0, 0x2e
sb v0, (v1)
addiu v1, v1, 1
bnel v1, a1, 0x1ba78
lbu v0, (v1)
lw t9, -sym.imp.close(gp)
move a0, s3
jalr t9
sb zero, 0x32(sp)
lw gp, 0x18(sp)
move a3, s0
addiu a2, sp, 0x24
lw a0, -str._ias_(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
move a1, s2
jalr t9
addiu a0, a0, 0x1964
b 0x1bb80
lw gp, 0x18(sp)
addiu a0, v1, 0x2e
srl v1, v0, 0xc
xor v0, v1, v0
andi v0, v0, 0x3f
beqz v0, 0x1b9e0
sb a0, 0x24(sp)
addiu v1, zero, 1
beq v0, v1, 0x1bc44
addiu v1, v0, -2
sltiu v1, v1, 0xa
bnez v1, 0x1bb34
addiu v1, v0, -0xc
sltiu v1, v1, 0x1a
bnez v1, 0x1bc24
addiu v1, zero, 0x3f
--
move a0, s4
addiu v1, zero, 1
beq v0, v1, 0x1c0f4
lw gp, 0x18(sp)
lw s2, -str._ias_(gp)
lw t9, -sym.imp.g_string_new(gp)
jalr t9
addiu a0, s2, -0x750
lw gp, 0x18(sp)
move s3, v0
addiu v1, s2, -0x750
lw v0, -str._ias_(gp)
lw s7, -str._ias_(gp)
addiu v0, v0, -0x1a98
sw v1, 0x20(sp)
lw fp, (s4)
move s0, s4
move s2, zero
move a2, v1
addiu s7, s7, -0x2038
b 0x1c010
sw v0, 0x24(sp)
lw v0, 0x24(sp)
lw fp, (s0)
movn a2, v0, s2
lw t9, -sym.imp.g_string_append_printf(gp)
lw a3, 8(fp)
move a1, s7
jalr t9
move a0, s3
lw gp, 0x18(sp)
move a0, fp
lw t9, -sym.imp.g_error_free(gp)
jalr t9
addiu s2, s2, 1
lw gp, 0x18(sp)
sw zero, (s0)
lw s0, 4(s0)
bnez s0, 0x1c004
lw a2, 0x20(sp)
lw t9, -sym.policykit_system_error_quark(gp)
bal sym.policykit_system_error_quark
nop
lw gp, 0x18(sp)
lw v1, (s3)
move a1, v0
--
lw v0, -str._ias_(gp)
addiu v0, v0, -0x74c
sw v0, 0x50(sp)
beqz s6, 0x1c54c
lw v0, 0x3c(sp)
bnez v0, 0x1cac4
lw t9, -str._ias_(gp)
sll s1, s2, 1
lw v0, 0x2c(sp)
addu s1, s1, s2
addiu s0, zero, 0xc4
sll s1, s1, 3
addu s1, v0, s1
mul v0, s2, s0
sll s3, s2, 3
addu s0, v0, fp
lw v0, 0x30(sp)
addu s3, v0, s3
lw v0, -str._ias_(gp)
sw v0, 0x28(sp)
lw v0, -str._ias_(gp)
sw v0, 0x34(sp)
lw v0, -str._ias_(gp)
sw v0, 0x38(sp)
lw v0, 0x28(sp)
lw t9, -sym.imp.snprintf(gp)
lw a3, 4(s1)
addiu a2, v0, 0x1db0
addiu a1, zero, 0x1e
jalr t9
move a0, s0
lw v0, 4(s3)
lw gp, 0x20(sp)
beqz v0, 0x1c868
addiu s2, s2, 1
lw s4, (s3)
beqz s4, 0x1cb58
lw t9, -sym.policykit_system_error_quark(gp)
lw v0, 0x24(s0)
beqz v0, 0x1c600
lw v0, -str._ias_(gp)
lw a3, -str._ias_(gp)
lw a1, -str._ias_(gp)
lw t9, -sym.imp.g_warn_message(gp)
addiu v0, v0, 0x1b18
sw v0, 0x10(sp)
--
lw v0, 0xc0(s0)
beql v0, zero, 0x1c678
lw v0, 0x10(s1)
lw v0, -str._ias_(gp)
lw a3, -str._ias_(gp)
lw a1, -str._ias_(gp)
lw t9, -sym.imp.g_warn_message(gp)
addiu v0, v0, 0x1b40
sw v0, 0x10(sp)
addiu a3, a3, 0x1e00
addiu a2, zero, 0x6e
addiu a1, a1, 0x1b00
jalr t9
move a0, zero
lw gp, 0x20(sp)
lw v0, 0x10(s1)
beqz v0, 0x1cbc8
lw t9, -sym.imp.__xstat(gp)
lw a1, 8(s1)
addiu a2, s0, 0x2c
jalr t9
addiu a0, zero, 3
bltz v0, 0x1ca40
lw gp, 0x20(sp)
lw v0, 0x34(sp)
lw t9, -sym.imp.g_strdup_printf(gp)
addiu a2, v0, 0x1ba0
lw v0, 0x38(sp)
lw a1, 8(s1)
jalr t9
addiu a0, v0, -0x2038
lw gp, 0x20(sp)
sw v0, 0xbc(s0)
lw t9, -sym.imp.g_unlink(gp)
jalr t9
move a0, v0
beqz v0, 0x1cba4
lw gp, 0x20(sp)
lw t9, -sym.imp.__errno_location(gp)
jalr t9
nop
move s7, v0
addiu v0, zero, 2
lw a0, (s7)
bne a0, v0, 0x1cbfc
lw gp, 0x20(sp)

[*] Function printf used 8 times policykit_system