[*] Binary protection state of mtd_probe
Full RELRO Canary found NX disabled PIE enabled RPATH No RUNPATH No Symbols
[*] Function printf tear down of mtd_probe
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/lib/udev/mtd_probe @ 0x323c */
| #include <stdint.h>
|
; (fcn) sym.log_internalv_realm () | void log_internalv_realm () {
0x0000323c lui gp, 2 |
0x00003240 addiu gp, gp, -0x622c |
0x00003244 addu gp, gp, t9 | gp += t9;
0x00003248 addiu sp, sp, -0x860 |
0x0000324c lw t9, -0x7f08(gp) | t9 = sym.imp.__errno_location;
0x00003250 sw s4, 0x848(sp) | *(var_848h) = s4;
0x00003254 lw s4, -0x7ec0(gp) | s4 = *((gp - 8112));
0x00003258 sw gp, 0x28(sp) | *(var_28h) = gp;
0x0000325c sw s7, 0x854(sp) | *(var_854h) = s7;
0x00003260 sw s6, 0x850(sp) | *(var_850h) = s6;
0x00003264 sw s5, 0x84c(sp) | *(var_84ch) = s5;
0x00003268 sw s3, 0x844(sp) | *(var_844h) = s3;
0x0000326c sw s2, 0x840(sp) | *(var_840h) = s2;
0x00003270 sw s1, 0x83c(sp) | *(var_83ch) = s1;
0x00003274 sw s0, 0x838(sp) | *(var_838h) = s0;
0x00003278 sw ra, 0x85c(sp) | *(var_85ch) = ra;
0x0000327c sw fp, 0x858(sp) | *(var_858h) = fp;
0x00003280 lw v0, (s4) | v0 = *(s4);
0x00003284 move s2, a1 | s2 = a1;
0x00003288 sw v0, 0x834(sp) | *(var_834h) = v0;
0x0000328c move s3, a0 | s3 = a0;
0x00003290 move s0, a2 | s0 = a2;
0x00003294 move s1, a3 | s1 = a3;
0x00003298 jalr t9 | t9 ();
0x0000329c move s5, v0 | s5 = v0;
0x000032a0 lw gp, 0x28(sp) | gp = *(var_28h);
0x000032a4 lw s7, 0x870(sp) | s7 = *(arg_870h);
0x000032a8 lw t0, 0x874(sp) | t0 = *(arg_874h);
0x000032ac lw t1, 0x878(sp) | t1 = *(arg_878h);
0x000032b0 lw s6, (v0) | s6 = *(v0);
| if (s2 < 0) {
0x000032b4 bltz s2, 0x3328 | goto label_1;
| }
0x000032b8 sra v1, s3, 0xa | v1 = s3 >> 0xa;
0x000032bc sll a1, v1, 2 | a1 = v1 << 2;
0x000032c0 lw v1, -0x7fc4(gp) | v1 = *((gp - 8177));
0x000032c4 andi a0, s3, 7 | a0 = s3 & 7;
0x000032c8 addiu v1, v1, 0x5014 | v1 += 0x5014;
0x000032cc move v0, s2 | v0 = s2;
0x000032d0 lwx v1, a1(v1) | __asm ("lwx v1, a1(v1)");
0x000032d4 slt v1, v1, a0 | v1 = (v1 < a0) ? 1 : 0;
0x000032d8 andi v0, v0, 0xff | v0 &= 0xff;
| if (v1 == 0) {
0x000032dc beqz v1, 0x3350 | goto label_2;
| }
| do {
0x000032e0 negu v0, v0 | __asm ("negu v0, v0");
| if (s6 < 0) {
| label_0:
0x000032e4 bgezl s6, 0x32ec |
0x000032e8 sw s6, (s5) | *(s5) = s6;
| }
0x000032ec lw a0, 0x834(sp) | a0 = *(var_834h);
0x000032f0 lw v1, (s4) | v1 = *(s4);
0x000032f4 lw ra, 0x85c(sp) | ra = *(var_85ch);
| if (a0 != v1) {
0x000032f8 bne a0, v1, 0x33b4 | goto label_3;
| }
0x000032fc lw fp, 0x858(sp) | fp = *(var_858h);
0x00003300 lw s7, 0x854(sp) | s7 = *(var_854h);
0x00003304 lw s6, 0x850(sp) | s6 = *(var_850h);
0x00003308 lw s5, 0x84c(sp) | s5 = *(var_84ch);
0x0000330c lw s4, 0x848(sp) | s4 = *(var_848h);
0x00003310 lw s3, 0x844(sp) | s3 = *(var_844h);
0x00003314 lw s2, 0x840(sp) | s2 = *(var_840h);
0x00003318 lw s1, 0x83c(sp) | s1 = *(var_83ch);
0x0000331c lw s0, 0x838(sp) | s0 = *(var_838h);
0x00003320 addiu sp, sp, 0x860 |
0x00003324 jr ra | return v0;
| label_1:
0x00003328 sra v1, s3, 0xa | v1 = s3 >> 0xa;
0x0000332c sll a1, v1, 2 | a1 = v1 << 2;
0x00003330 lw v1, -0x7fc4(gp) | v1 = *((gp - 8177));
0x00003334 andi a0, s3, 7 | a0 = s3 & 7;
0x00003338 addiu v1, v1, 0x5014 | v1 += 0x5014;
0x0000333c negu v0, s2 | __asm ("negu v0, s2");
0x00003340 lwx v1, a1(v1) | __asm ("lwx v1, a1(v1)");
0x00003344 slt v1, v1, a0 | v1 = (v1 < a0) ? 1 : 0;
0x00003348 andi v0, v0, 0xff | v0 &= 0xff;
0x0000334c bnez v1, 0x32e0 |
| } while (v1 != 0);
| label_2:
0x00003350 lw t9, -0x7f10(gp) | t9 = sym.imp.__vsnprintf_chk
0x00003354 addiu fp, sp, 0x34 | fp = sp + 0x34;
0x00003358 sw v0, (s5) | *(s5) = v0;
0x0000335c addiu a3, zero, 0x800 | a3 = 0x800;
0x00003360 addiu a2, zero, 1 | a2 = 1;
0x00003364 addiu a1, zero, 0x800 | a1 = 0x800;
0x00003368 move a0, fp | a0 = fp;
0x0000336c sw t1, 0x14(sp) | *(var_4ch) = t1;
0x00003370 sw t0, 0x10(sp) | *(var_48h) = t0;
0x00003374 jalr t9 | t9 ();
0x00003378 lw gp, 0x28(sp) | gp = *(var_28h);
0x0000337c sw fp, 0x24(sp) | *(var_24h_2) = fp;
0x00003380 sw zero, 0x20(sp) | *(var_20h_3) = 0;
0x00003384 lw t9, -0x7f88(gp) | t9 = sym.log_dispatch_internal;
0x00003388 sw zero, 0x1c(sp) | *(var_1ch_2) = 0;
0x0000338c sw zero, 0x18(sp) | *(var_50h) = 0;
0x00003390 sw zero, 0x14(sp) | *(var_4ch) = 0;
0x00003394 sw s7, 0x10(sp) | *(var_48h) = s7;
0x00003398 move a3, s1 | a3 = s1;
0x0000339c move a2, s0 | a2 = s0;
0x000033a0 move a1, s2 | a1 = s2;
0x000033a4 move a0, s3 | a0 = s3;
0x000033a8 bal 0x29fc | sym_log_dispatch_internal ();
0x000033ac lw gp, 0x28(sp) | gp = *(var_28h);
0x000033b0 b 0x32e4 | goto label_0;
| label_3:
0x000033b4 lw t9, -0x7ec4(gp) | t9 = sym.imp.__stack_chk_fail;
0x000033b8 jalr t9 | t9 ();
0x000033bc nop |
| }
[*] Function printf used 2 times mtd_probe
