[*] Binary protection state of oak.cgi
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of oak.cgi
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/oak.cgi @ 0x181c */
| #include <stdint.h>
|
; (fcn) fcn.0000181c () | void fcn_0000181c () {
0x0000181c lui gp, 2 |
0x00001820 addiu gp, gp, -0x580c |
0x00001824 addu gp, gp, t9 | gp += t9;
0x00001828 addiu sp, sp, -0x30 |
0x0000182c lw t9, -0x7ecc(gp) | t9 = sym.imp.g_strnfill;
0x00001830 move a1, zero | a1 = 0;
0x00001834 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00001838 sw s4, 0x28(sp) | *(var_28h) = s4;
0x0000183c sw s3, 0x24(sp) | *(var_24h) = s3;
0x00001840 sw s2, 0x20(sp) | *(var_20h) = s2;
0x00001844 sw s1, 0x1c(sp) | *(var_1ch) = s1;
0x00001848 sw s0, 0x18(sp) | *(var_18h) = s0;
0x0000184c sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x00001850 move s1, a0 | s1 = a0;
0x00001854 addiu a0, zero, 0x29 | a0 = 0x29;
0x00001858 jalr t9 | t9 ();
0x0000185c lw gp, 0x10(sp) | gp = *(var_10h);
0x00001860 move s4, v0 | s4 = v0;
0x00001864 move s0, v0 | s0 = v0;
0x00001868 lw s2, -0x7fdc(gp) | s2 = *((gp - 8183));
0x0000186c addiu s3, v0, 0x28 | s3 = v0 + 0x28;
0x00001870 addiu s2, s2, 0x2fa4 | s2 += str._02x;
| do {
0x00001874 lw t9, -0x7f28(gp) | t9 = sym.imp.g_sprintf
0x00001878 lbu a2, (s1) | a2 = *(s1);
0x0000187c move a0, s0 | a0 = s0;
0x00001880 move a1, s2 | a1 = s2;
0x00001884 addiu s0, s0, 2 | s0 += 2;
0x00001888 jalr t9 | t9 ();
0x0000188c addiu s1, s1, 1 | s1++;
0x00001890 lw gp, 0x10(sp) | gp = *(var_10h);
0x00001894 bne s3, s0, 0x1874 |
| } while (s3 != s0);
0x00001898 lw ra, 0x2c(sp) | ra = *(var_2ch);
0x0000189c move v0, s4 | v0 = s4;
0x000018a0 lw s3, 0x24(sp) | s3 = *(var_24h);
0x000018a4 lw s4, 0x28(sp) | s4 = *(var_28h);
0x000018a8 lw s2, 0x20(sp) | s2 = *(var_20h);
0x000018ac lw s1, 0x1c(sp) | s1 = *(var_1ch);
0x000018b0 lw s0, 0x18(sp) | s0 = *(var_18h);
0x000018b4 addiu sp, sp, 0x30 |
0x000018b8 jr ra | return v0;
| }
[*] Function sprintf used 2 times oak.cgi