[*] Binary protection state of pwdgrp.cgi
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of pwdgrp.cgi
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/pwdgrp.cgi @ 0x36a8 */
| #include <stdint.h>
|
; (fcn) fcn.000036a8 () | void fcn_000036a8 () {
0x000036a8 lui gp, 2 |
0x000036ac addiu gp, gp, -0x4698 |
0x000036b0 addu gp, gp, t9 | gp += t9;
0x000036b4 addiu sp, sp, -0x28 |
0x000036b8 addiu v0, sp, 0x2c | v0 = sp + 0x2c;
0x000036bc sw s0, 0x20(sp) | *(var_20h_2) = s0;
0x000036c0 lw s0, -0x7ef8(gp) | s0 = *((gp - 8126));
0x000036c4 sw a2, 0x30(sp) | *(var_30h) = a2;
0x000036c8 move a2, a0 | a2 = a0;
0x000036cc lw a0, -0x7f2c(gp) | a0 = *((gp - 8139));
0x000036d0 lw v1, (s0) | v1 = *(s0);
0x000036d4 lw t9, -0x7ed8(gp) | t9 = sym.imp.__vfprintf_chk
0x000036d8 lw a0, (a0) | a0 = *(a0);
0x000036dc sw gp, 0x10(sp) | *(var_10h_2) = gp;
0x000036e0 sw a1, 0x2c(sp) | *(var_2ch_2) = a1;
0x000036e4 sw a3, 0x34(sp) | *(var_34h) = a3;
0x000036e8 sw v1, 0x1c(sp) | *(var_1ch_2) = v1;
0x000036ec sw ra, 0x24(sp) | *(var_24h_2) = ra;
0x000036f0 sw v0, 0x18(sp) | *(var_18h) = v0;
0x000036f4 move a3, v0 | a3 = v0;
0x000036f8 addiu a1, zero, 1 | a1 = 1;
0x000036fc jalr t9 | t9 ();
0x00003700 lw a0, 0x1c(sp) | a0 = *(var_1ch_2);
0x00003704 lw v1, (s0) | v1 = *(s0);
0x00003708 lw gp, 0x10(sp) | gp = *(var_10h_2);
| if (a0 == v1) {
0x0000370c bne a0, v1, 0x3724 |
0x00003710 lw ra, 0x24(sp) | ra = *(var_24h_2);
0x00003714 lw s0, 0x20(sp) | s0 = *(var_20h_2);
0x00003718 sra v0, v0, 0x1f | v0 >>= 0x1f;
0x0000371c addiu sp, sp, 0x28 |
0x00003720 jr ra | return v0;
| }
0x00003724 lw t9, -0x7f14(gp) | t9 = sym.imp.__stack_chk_fail;
0x00003728 jalr t9 | t9 ();
0x0000372c nop |
| }
[*] Function fprintf used 2 times pwdgrp.cgi