[*] Binary protection state of client.cgi
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function system tear down of client.cgi
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/mqtt/client.cgi @ 0xb1b0 */
| #include <stdint.h>
|
; (fcn) fcn.0000b1b0 () | void fcn_0000b1b0 () {
0x0000b1b0 lui gp, 4 |
0x0000b1b4 addiu gp, gp, 0x1070 |
0x0000b1b8 addu gp, gp, t9 | gp += t9;
0x0000b1bc addiu sp, sp, -0x60 |
0x0000b1c0 sw s1, 0x4c(sp) | *(var_4ch) = s1;
0x0000b1c4 lw s1, -0x7a7c(gp) | s1 = *((gp - 7839));
0x0000b1c8 sw gp, 0x20(sp) | *(var_20h) = gp;
0x0000b1cc sw ra, 0x5c(sp) | *(var_5ch) = ra;
0x0000b1d0 lw v0, (s1) | v0 = *(s1);
0x0000b1d4 sw s4, 0x58(sp) | *(var_58h) = s4;
0x0000b1d8 sw s3, 0x54(sp) | *(var_54h) = s3;
0x0000b1dc sw s2, 0x50(sp) | *(var_50h) = s2;
0x0000b1e0 sw s0, 0x48(sp) | *(var_48h) = s0;
0x0000b1e4 sw zero, 0x2c(sp) | *(var_2ch) = 0;
0x0000b1e8 sw v0, 0x44(sp) | *(var_44h) = v0;
0x0000b1ec sw zero, 0x38(sp) | *(var_38h) = 0;
0x0000b1f0 sw zero, 0x3c(sp) | *(var_3ch) = 0;
0x0000b1f4 sw zero, 0x40(sp) | *(var_40h) = 0;
0x0000b1f8 sw zero, 0x30(sp) | *(var_30h) = 0;
0x0000b1fc sw zero, 0x34(sp) | *(var_34h) = 0;
| if (a1 == 0) {
0x0000b200 beqz a1, 0xb334 | goto label_1;
| }
0x0000b204 lw v0, (a1) | v0 = *(a1);
0x0000b208 move s0, a1 | s0 = a1;
| if (v0 != 0) {
0x0000b20c beqz v0, 0xb23c |
0x0000b210 lw v0, -0x7fd8(gp) | v0 = *(gp);
0x0000b214 lw a3, -0x7fd8(gp) | a3 = *(gp);
0x0000b218 lw a1, -0x7fd8(gp) | a1 = *(gp);
| /* str._error */
0x0000b21c addiu v0, v0, -0x30f0 | v0 += -0x30f0;
0x0000b220 lw t9, -0x7bbc(gp) | t9 = sym.imp.g_assertion_message_expr;
0x0000b224 sw v0, 0x10(sp) | *(var_10h) = v0;
| /* str.gboolean_ssd_client_const_string__const_tree_element__GList__json_error_ */
0x0000b228 addiu a3, a3, -0x2ca0 | a3 += -0x2ca0;
0x0000b22c addiu a2, zero, 0xbd | a2 = 0xbd;
| /* str..._git_client.cpp */
0x0000b230 addiu a1, a1, -0x310c | a1 += -0x310c;
0x0000b234 move a0, zero | a0 = 0;
0x0000b238 jalr t9 | t9 ();
| }
0x0000b23c lw t9, -0x7b08(gp) | t9 = sym.imp.sd_bus_open_system
0x0000b240 move s2, a0 | s2 = a0;
0x0000b244 addiu a0, sp, 0x2c | a0 = sp + 0x2c;
0x0000b248 jalr t9 | t9 ();
0x0000b24c lw gp, 0x20(sp) | gp = *(var_20h);
| if (v0 < 0) {
0x0000b250 bltz v0, 0xb360 | goto label_2;
| }
0x0000b254 lw s3, -0x7fd8(gp) | s3 = *(gp);
0x0000b258 lw a3, -0x7fd8(gp) | a3 = *(gp);
0x0000b25c lw v0, (s2) | v0 = *(s2);
0x0000b260 lw a2, -0x7fd8(gp) | a2 = *(gp);
0x0000b264 lw t9, -0x7abc(gp) | t9 = sym.imp.sd_bus_call_method;
| /* str.com.axis.MQTTMessagingService1 */
0x0000b268 addiu a3, a3, -0x30cc | a3 += -0x30cc;
0x0000b26c addiu v1, sp, 0x30 | v1 = sp + 0x30;
0x0000b270 addiu s4, s3, -0x28ec | s4 = s3 + -0x28ec;
0x0000b274 addiu s2, sp, 0x38 | s2 = sp + 0x38;
0x0000b278 lw a0, 0x2c(sp) | a0 = *(var_2ch);
0x0000b27c sw s4, 0x1c(sp) | *(var_1ch) = s4;
0x0000b280 sw v1, 0x18(sp) | *(var_18h) = v1;
0x0000b284 sw s2, 0x14(sp) | *(var_14h) = s2;
0x0000b288 sw v0, 0x10(sp) | *(var_10h) = v0;
| /* str._com_axis_MQTTMessagingService1 */
0x0000b28c addiu a2, a2, -0x30ac | a2 += -0x30ac;
0x0000b290 move a1, a3 | a1 = a3;
0x0000b294 jalr t9 | t9 ();
0x0000b298 lw gp, 0x20(sp) | gp = *(var_20h);
| if (v0 < 0) {
0x0000b29c bltz v0, 0xb3a4 | goto label_3;
| }
0x0000b2a0 lw t9, -0x7b14(gp) | t9 = sym.imp.sd_bus_message_read_basic;
0x0000b2a4 lw a0, 0x30(sp) | a0 = *(var_30h);
0x0000b2a8 addiu a2, sp, 0x34 | a2 = sp + 0x34;
0x0000b2ac addiu a1, zero, 0x75 | a1 = 0x75;
0x0000b2b0 jalr t9 | t9 ();
0x0000b2b4 lw gp, 0x20(sp) | gp = *(var_20h);
0x0000b2b8 lw v1, 0x34(sp) | v1 = *(var_34h);
| if (v0 < 0) {
0x0000b2bc bltz v0, 0xb3e8 | goto label_4;
| }
0x0000b2c0 lw a2, -0x7fd8(gp) | a2 = *(gp);
| if (v1 != 0) {
0x0000b2c4 bnez v1, 0xb3ec | goto label_5;
| }
0x0000b2c8 addiu s0, zero, 1 | s0 = 1;
| do {
| label_0:
0x0000b2cc lw a0, 0x2c(sp) | a0 = *(var_2ch);
0x0000b2d0 lw t9, -0x7b7c(gp) | t9 = sym.imp.sd_bus_unref;
| if (a0 != 0) {
0x0000b2d4 beqz a0, 0xb2e4 |
0x0000b2d8 jalr t9 | t9 ();
0x0000b2dc nop |
0x0000b2e0 lw gp, 0x20(sp) | gp = *(var_20h);
| }
0x0000b2e4 lw t9, -0x7a60(gp) | t9 = sym.imp.sd_bus_error_free;
0x0000b2e8 move a0, s2 | a0 = s2;
0x0000b2ec jalr t9 | t9 ();
0x0000b2f0 lw gp, 0x20(sp) | gp = *(var_20h);
0x0000b2f4 lw t9, -0x7b1c(gp) | t9 = sym.imp.sd_bus_message_unref;
0x0000b2f8 lw a0, 0x30(sp) | a0 = *(var_30h);
0x0000b2fc jalr t9 | t9 ();
0x0000b300 lw a0, 0x44(sp) | a0 = *(var_44h);
0x0000b304 lw v1, (s1) | v1 = *(s1);
0x0000b308 lw gp, 0x20(sp) | gp = *(var_20h);
0x0000b30c move v0, s0 | v0 = s0;
| if (a0 != v1) {
0x0000b310 bne a0, v1, 0xb414 | goto label_6;
| }
0x0000b314 lw ra, 0x5c(sp) | ra = *(var_5ch);
0x0000b318 lw s4, 0x58(sp) | s4 = *(var_58h);
0x0000b31c lw s3, 0x54(sp) | s3 = *(var_54h);
0x0000b320 lw s2, 0x50(sp) | s2 = *(var_50h);
0x0000b324 lw s1, 0x4c(sp) | s1 = *(var_4ch);
0x0000b328 lw s0, 0x48(sp) | s0 = *(var_48h);
0x0000b32c addiu sp, sp, 0x60 |
0x0000b330 jr ra | return v0;
| label_1:
0x0000b334 lw v0, -0x7fd8(gp) | v0 = *(gp);
0x0000b338 lw a3, -0x7fd8(gp) | a3 = *(gp);
0x0000b33c lw a1, -0x7fd8(gp) | a1 = *(gp);
| /* str.error */
0x0000b340 addiu v0, v0, -0x30f8 | v0 += -0x30f8;
0x0000b344 lw t9, -0x7bbc(gp) | t9 = sym.imp.g_assertion_message_expr;
0x0000b348 sw v0, 0x10(sp) | *(var_10h) = v0;
| /* str.gboolean_ssd_client_const_string__const_tree_element__GList__json_error_ */
0x0000b34c addiu a3, a3, -0x2ca0 | a3 += -0x2ca0;
0x0000b350 addiu a2, zero, 0xbc | a2 = 0xbc;
| /* str..._git_client.cpp */
0x0000b354 addiu a1, a1, -0x310c | a1 += -0x310c;
0x0000b358 move a0, zero | a0 = 0;
0x0000b35c jalr t9 | t9 ();
| label_2:
0x0000b360 lw a3, -0x7fd8(gp) | a3 = *(gp);
0x0000b364 lw a2, -0x7fd8(gp) | a2 = *(gp);
0x0000b368 lw t9, -0x7aa0(gp) | t9 = sym.imp.g_log;
0x0000b36c addiu a3, a3, -0x28ec | a3 += -0x28ec;
| /* str._sFail_to_open_system_bus */
0x0000b370 addiu a2, a2, -0x30e8 | a2 += -aav.0x000030e8;
0x0000b374 addiu a1, zero, 0x100 | a1 = aav.0x00000100;
0x0000b378 move a0, zero | a0 = 0;
0x0000b37c jalr t9 | t9 ();
0x0000b380 lw gp, 0x20(sp) | gp = *(var_20h);
0x0000b384 addiu a0, zero, 1 | a0 = 1;
0x0000b388 lw t9, -0x7c48(gp) | t9 = sym.make_error_jc_error_id_;
0x0000b38c addiu s2, sp, 0x38 | s2 = sp + 0x38;
0x0000b390 jalr t9 | t9 ();
0x0000b394 lw gp, 0x20(sp) | gp = *(var_20h);
0x0000b398 sw v0, (s0) | *(s0) = v0;
0x0000b39c move s0, zero | s0 = 0;
0x0000b3a0 b 0xb2cc |
| } while (1);
| label_3:
0x0000b3a4 lw a2, -0x7fd8(gp) | a2 = *(gp);
0x0000b3a8 lw v0, 0x3c(sp) | v0 = *(var_3ch);
0x0000b3ac lw t9, -0x7aa0(gp) | t9 = sym.imp.g_log;
0x0000b3b0 move a3, s4 | a3 = s4;
| /* str._sdbus_method_fail:_s */
0x0000b3b4 addiu a2, a2, -0x308c | a2 += -0x308c;
0x0000b3b8 addiu a1, zero, 0x100 | a1 = aav.0x00000100;
0x0000b3bc move a0, zero | a0 = 0;
0x0000b3c0 sw v0, 0x10(sp) | *(var_10h) = v0;
0x0000b3c4 jalr t9 | t9 ();
0x0000b3c8 lw gp, 0x20(sp) | gp = *(var_20h);
| do {
0x0000b3cc lw t9, -0x7c48(gp) | t9 = sym.make_error_jc_error_id_;
0x0000b3d0 addiu a0, zero, 1 | a0 = 1;
0x0000b3d4 jalr t9 | t9 ();
0x0000b3d8 lw gp, 0x20(sp) | gp = *(var_20h);
0x0000b3dc sw v0, (s0) | *(s0) = v0;
0x0000b3e0 move s0, zero | s0 = 0;
0x0000b3e4 b 0xb2cc | goto label_0;
| label_4:
0x0000b3e8 lw a2, -0x7fd8(gp) | a2 = *(gp);
| label_5:
0x0000b3ec lw t9, -0x7aa0(gp) | t9 = sym.imp.g_log;
0x0000b3f0 addiu a3, s3, -0x28ec | a3 = s3 + -0x28ec;
| /* str._sread_reply_fail__d__or_dbus_fail__d_ */
0x0000b3f4 addiu a2, a2, -0x3074 | a2 += -0x3074;
0x0000b3f8 addiu a1, zero, 0x100 | a1 = aav.0x00000100;
0x0000b3fc move a0, zero | a0 = 0;
0x0000b400 sw v1, 0x14(sp) | *(var_14h) = v1;
0x0000b404 sw v0, 0x10(sp) | *(var_10h) = v0;
0x0000b408 jalr t9 | t9 ();
0x0000b40c lw gp, 0x20(sp) | gp = *(var_20h);
0x0000b410 b 0xb3cc |
| } while (1);
| label_6:
0x0000b414 lw t9, -0x7b58(gp) | t9 = sym.imp.__stack_chk_fail;
0x0000b418 jalr t9 | t9 ();
0x0000b41c nop |
| }
[*] Function system used 3 times client.cgi
