[*] Binary protection state of pwdgrp.cgi
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function system tear down of pwdgrp.cgi
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/html/axis-cgi/pwdgrp.cgi @ 0x1a90 */
| #include <stdint.h>
|
; (fcn) sym.dbus_init () | void dbus_init () {
0x00001a90 lui gp, 2 |
0x00001a94 addiu gp, gp, -0x2a80 |
0x00001a98 addu gp, gp, t9 | gp += t9;
0x00001a9c addiu sp, sp, -0x20 |
0x00001aa0 lw a0, -0x7fa4(gp) | a0 = *((gp - 8169));
0x00001aa4 lw t9, -0x7eec(gp) | t9 = sym.imp.sd_bus_open_system
0x00001aa8 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00001aac sw ra, 0x1c(sp) | *(var_1ch) = ra;
0x00001ab0 addiu a0, a0, 0x71b0 | a0 += 0x71b0;
0x00001ab4 jalr t9 | t9 ();
0x00001ab8 move a0, v0 | a0 = v0;
0x00001abc lw gp, 0x10(sp) | gp = *(var_10h);
0x00001ac0 move v0, zero | v0 = 0;
0x00001ac4 bltz a0, 0x1ad4 |
| while (1) {
0x00001ac8 lw ra, 0x1c(sp) | ra = *(var_1ch);
0x00001acc addiu sp, sp, 0x20 |
0x00001ad0 jr ra | return v0;
0x00001ad4 lw t9, -0x7e88(gp) | t9 = sym.imp.strerror;
0x00001ad8 negu a0, a0 | __asm ("negu a0, a0");
0x00001adc jalr t9 | t9 ();
0x00001ae0 lw gp, 0x10(sp) | gp = *(var_10h);
0x00001ae4 move a3, v0 | a3 = v0;
0x00001ae8 addiu a1, zero, 1 | a1 = 1;
0x00001aec lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00001af0 lw t9, -0x7f04(gp) | t9 = sym.imp.__syslog_chk;
0x00001af4 addiu a2, a2, 0x5428 | a2 += str.Failed_to_connect_to_system_bus:__s_n
0x00001af8 addiu a0, zero, 3 | a0 = 3;
0x00001afc jalr t9 | t9 ();
0x00001b00 addiu v0, zero, -1 | v0 = -1;
0x00001b04 b 0x1ac8 |
| }
| }
[*] Function system used 3 times pwdgrp.cgi