[*] Binary protection state of pwdgrp.cgi

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function system tear down of pwdgrp.cgi

    ; assembly                               | /* r2dec pseudo code output */
                                             | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/pwdgrp.cgi @ 0x1a90 */
                                             | #include <stdint.h>
                                             |  
    ; (fcn) sym.dbus_init ()                 | void dbus_init () {
    0x00001a90 lui gp, 2                     |     
    0x00001a94 addiu gp, gp, -0x2a80         |     
    0x00001a98 addu gp, gp, t9               |     gp += t9;
    0x00001a9c addiu sp, sp, -0x20           |     
    0x00001aa0 lw a0, -0x7fa4(gp)            |     a0 = *((gp - 8169));
    0x00001aa4 lw t9, -0x7eec(gp)            |     t9 = sym.imp.sd_bus_open_system
    0x00001aa8 sw gp, 0x10(sp)               |     *(var_10h) = gp;
    0x00001aac sw ra, 0x1c(sp)               |     *(var_1ch) = ra;
    0x00001ab0 addiu a0, a0, 0x71b0          |     a0 += 0x71b0;
    0x00001ab4 jalr t9                       |     t9 ();
    0x00001ab8 move a0, v0                   |     a0 = v0;
    0x00001abc lw gp, 0x10(sp)               |     gp = *(var_10h);
    0x00001ac0 move v0, zero                 |     v0 = 0;
    0x00001ac4 bltz a0, 0x1ad4               |     
                                             |     while (1) {
    0x00001ac8 lw ra, 0x1c(sp)               |         ra = *(var_1ch);
    0x00001acc addiu sp, sp, 0x20            |         
    0x00001ad0 jr ra                         |         return v0;
    0x00001ad4 lw t9, -0x7e88(gp)            |         t9 = sym.imp.strerror;
    0x00001ad8 negu a0, a0                   |         __asm ("negu a0, a0");
    0x00001adc jalr t9                       |         t9 ();
    0x00001ae0 lw gp, 0x10(sp)               |         gp = *(var_10h);
    0x00001ae4 move a3, v0                   |         a3 = v0;
    0x00001ae8 addiu a1, zero, 1             |         a1 = 1;
    0x00001aec lw a2, -0x7fdc(gp)            |         a2 = *((gp - 8183));
    0x00001af0 lw t9, -0x7f04(gp)            |         t9 = sym.imp.__syslog_chk;
    0x00001af4 addiu a2, a2, 0x5428          |         a2 += str.Failed_to_connect_to_system_bus:__s_n
    0x00001af8 addiu a0, zero, 3             |         a0 = 3;
    0x00001afc jalr t9                       |         t9 ();
    0x00001b00 addiu v0, zero, -1            |         v0 = -1;
    0x00001b04 b 0x1ac8                      |         
                                             |     }
                                             | }

[*] Function system used 3 times pwdgrp.cgi