[*] Binary protection state of browserlang.cgi
Full RELRO No Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of browserlang.cgi
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/browserlang.cgi @ 0x7a0 */
| #include <stdint.h>
|
; (fcn) main () | int32_t main () {
| /* [13] -r-x section size 672 named .text */
0x000007a0 lui gp, 2 |
0x000007a4 addiu gp, gp, -0x7790 |
0x000007a8 addu gp, gp, t9 | gp += t9;
0x000007ac addiu sp, sp, -0x20 |
0x000007b0 lw a0, -0x7fdc(gp) | a0 = *((gp - 8183));
0x000007b4 lw t9, -0x7f9c(gp) | t9 = sym.imp.getenv;
0x000007b8 sw ra, 0x1c(sp) | *(var_1ch) = ra;
0x000007bc sw s0, 0x18(sp) | *(var_18h) = s0;
0x000007c0 sw gp, 0x10(sp) | *(var_10h) = gp;
0x000007c4 addiu a0, a0, 0xac8 | a0 += str.HTTP_ACCEPT_LANGUAGE;
0x000007c8 jalr t9 | t9 ();
0x000007cc lw gp, 0x10(sp) | gp = *(var_10h);
0x000007d0 lw t9, -0x7fb0(gp) | t9 = sym.imp.CGI_plain_setup_RFC;
0x000007d4 move s0, v0 | s0 = v0;
0x000007d8 jalr t9 | t9 ();
0x000007dc lw gp, 0x10(sp) | gp = *(var_10h);
0x000007e0 move a2, s0 | a2 = s0;
0x000007e4 addiu a0, zero, 1 | a0 = 1;
0x000007e8 lw a1, -0x7fdc(gp) | a1 = *((gp - 8183));
0x000007ec lw t9, -0x7fa8(gp) | t9 = sym.imp.__printf_chk
0x000007f0 addiu a1, a1, 0xae0 | a1 += 0xae0;
0x000007f4 jalr t9 | t9 ();
0x000007f8 lw gp, 0x10(sp) | gp = *(var_10h);
0x000007fc lw t9, -0x7fac(gp) | t9 = sym.imp.CGI_cleanup;
0x00000800 jalr t9 | t9 ();
0x00000804 nop |
0x00000808 lw ra, 0x1c(sp) | ra = *(var_1ch);
0x0000080c lw s0, 0x18(sp) | s0 = *(var_18h);
0x00000810 move v0, zero | v0 = 0;
0x00000814 addiu sp, sp, 0x20 |
0x00000818 jr ra | return v0;
| }
[*] Function printf used 2 times browserlang.cgi