[*] Binary protection state of mDNSResponderPosix
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mDNSResponderPosix
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/mDNSResponderPosix @ 0x90e0 */
| #include <stdint.h>
|
; (fcn) fcn.000090e0 () | void fcn_000090e0 () {
0x000090e0 lui gp, 6 |
0x000090e4 addiu gp, gp, -0x7050 |
0x000090e8 addu gp, gp, t9 | gp += t9;
0x000090ec addiu sp, sp, -0x230 |
0x000090f0 lw t9, -0x7f20(gp) | t9 = sym.mDNS_vsnprintf
0x000090f4 sw s1, 0x224(sp) | *(var_224h) = s1;
0x000090f8 lw s1, -0x7a4c(gp) | s1 = *((gp - 7827));
0x000090fc sw gp, 0x10(sp) | *(var_10h) = gp;
0x00009100 sw ra, 0x22c(sp) | *(var_22ch) = ra;
0x00009104 sw s2, 0x228(sp) | *(var_228h) = s2;
0x00009108 sw s0, 0x220(sp) | *(var_220h) = s0;
0x0000910c lw v0, (s1) | v0 = *(s1);
0x00009110 addiu s0, sp, 0x1c | s0 = sp + 0x1c;
0x00009114 move a3, a2 | a3 = a2;
0x00009118 move s2, a0 | s2 = a0;
0x0000911c move a2, a1 | a2 = a1;
0x00009120 move a0, s0 | a0 = s0;
0x00009124 addiu a1, zero, 0x200 | a1 = aav.0x00000200;
0x00009128 sw v0, 0x21c(sp) | *(var_21ch) = v0;
0x0000912c bal 0x13f6c | sym_mDNS_vsnprintf ()
0x00009130 nop |
0x00009134 lw gp, 0x10(sp) | gp = *(var_10h);
0x00009138 addiu v1, sp, 0x220 | v1 = sp + 0x220;
0x0000913c addu v0, v1, v0 | v0 = v1 + v0;
0x00009140 lw a0, -0x7f1c(gp) | a0 = *(gp);
0x00009144 lw t9, -0x7f18(gp) | t9 = sym.mDNSPlatformWriteLogMsg;
0x00009148 sb zero, -0x204(v0) | *(v0) = 0;
0x0000914c move a2, s2 | a2 = s2;
0x00009150 move a1, s0 | a1 = s0;
0x00009154 bal 0x162c4 | sym_mDNSPlatformWriteLogMsg ();
0x00009158 lw v1, 0x21c(sp) | v1 = *(var_21ch);
0x0000915c lw v0, (s1) | v0 = *(s1);
0x00009160 lw gp, 0x10(sp) | gp = *(var_10h);
| if (v1 != v0) {
0x00009164 beq v1, v0, 0x9174 |
0x00009168 lw t9, -0x7a70(gp) | t9 = sym.imp.__stack_chk_fail;
0x0000916c jalr t9 | t9 ();
0x00009170 nop |
| }
0x00009174 lw ra, 0x22c(sp) | ra = *(var_22ch);
0x00009178 lw s2, 0x228(sp) | s2 = *(var_228h);
0x0000917c lw s1, 0x224(sp) | s1 = *(var_224h);
0x00009180 lw s0, 0x220(sp) | s0 = *(var_220h);
0x00009184 addiu sp, sp, 0x230 |
0x00009188 jr ra | return v1;
| }
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/mDNSResponderPosix @ 0x14d20 */
| #include <stdint.h>
|
; (fcn) fcn.00014d20 () | void fcn_00014d20 () {
0x00014d20 lui gp, 5 |
0x00014d24 addiu gp, gp, -0x2c90 |
0x00014d28 addu gp, gp, t9 | gp += t9;
0x00014d2c addiu sp, sp, -0x30 |
0x00014d30 lw v0, -0x7a4c(gp) | v0 = *((gp - 7827));
0x00014d34 sw s1, 0x24(sp) | *(var_24h) = s1;
0x00014d38 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00014d3c sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x00014d40 sw s2, 0x28(sp) | *(var_28h) = s2;
0x00014d44 sw s0, 0x20(sp) | *(var_20h) = s0;
0x00014d48 sw a3, 0x3c(sp) | *(arg_3ch) = a3;
0x00014d4c lw s0, (a0) | s0 = *(a0);
0x00014d50 lw v1, (v0) | v1 = *(v0);
0x00014d54 subu a1, a1, s0 | __asm ("subu a1, a1, s0");
0x00014d58 sw v1, 0x1c(sp) | *(var_1ch) = v1;
0x00014d5c move s1, v0 | s1 = v0;
| if (a1 != 0) {
0x00014d60 beqz a1, 0x14d88 |
0x00014d64 addiu a3, sp, 0x3c | a3 = sp + 0x3c;
0x00014d68 lw t9, -0x7f20(gp) | t9 = sym.mDNS_vsnprintf
0x00014d6c move s2, a0 | s2 = a0;
0x00014d70 sw a3, 0x18(sp) | *(var_18h) = a3;
0x00014d74 move a0, s0 | a0 = s0;
0x00014d78 bal 0x13f6c | sym_mDNS_vsnprintf ()
0x00014d7c addu v0, s0, v0 | v0 = s0 + v0;
0x00014d80 lw gp, 0x10(sp) | gp = *(var_10h);
0x00014d84 sw v0, (s2) | *(s2) = v0;
| }
0x00014d88 lw v1, 0x1c(sp) | v1 = *(var_1ch);
0x00014d8c lw v0, (s1) | v0 = *(s1);
0x00014d90 lw ra, 0x2c(sp) | ra = *(var_2ch);
| if (v1 != v0) {
0x00014d94 beq v1, v0, 0x14da4 |
0x00014d98 lw t9, -0x7a70(gp) | t9 = sym.imp.__stack_chk_fail;
0x00014d9c jalr t9 | t9 ();
0x00014da0 nop |
| }
0x00014da4 lw s2, 0x28(sp) | s2 = *(var_28h);
0x00014da8 lw s1, 0x24(sp) | s1 = *(var_24h);
0x00014dac lw s0, 0x20(sp) | s0 = *(var_20h);
0x00014db0 addiu sp, sp, 0x30 |
0x00014db4 jr ra | return v1;
| }
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/mDNSResponderPosix @ 0x10e60 */
| #include <stdint.h>
|
; (fcn) sym.mDNS_snprintf () | void mDNS_snprintf () {
0x00010e60 lui gp, 5 |
0x00010e64 addiu gp, gp, 0x1230 |
0x00010e68 addu gp, gp, t9 | gp += t9;
0x00010e6c addiu sp, sp, -0x28 |
0x00010e70 lw t9, -0x7f20(gp) | t9 = sym.mDNS_vsnprintf
0x00010e74 sw s0, 0x20(sp) | *(var_20h) = s0;
0x00010e78 lw s0, -0x7a4c(gp) | s0 = *((gp - 7827));
0x00010e7c sw gp, 0x10(sp) | *(var_10h) = gp;
0x00010e80 sw a3, 0x34(sp) | *(arg_34h) = a3;
0x00010e84 sw ra, 0x24(sp) | *(var_24h) = ra;
0x00010e88 lw v0, (s0) | v0 = *(s0);
0x00010e8c addiu a3, sp, 0x34 | a3 = sp + 0x34;
0x00010e90 sw v0, 0x1c(sp) | *(var_1ch) = v0;
0x00010e94 sw a3, 0x18(sp) | *(var_18h) = a3;
0x00010e98 bal 0x13f6c | sym_mDNS_vsnprintf ()
0x00010e9c nop |
0x00010ea0 lw a0, 0x1c(sp) | a0 = *(var_1ch);
0x00010ea4 lw v1, (s0) | v1 = *(s0);
0x00010ea8 lw gp, 0x10(sp) | gp = *(var_10h);
| if (a0 != v1) {
0x00010eac beq a0, v1, 0x10ebc |
0x00010eb0 lw t9, -0x7a70(gp) | t9 = sym.imp.__stack_chk_fail;
0x00010eb4 jalr t9 | t9 ();
0x00010eb8 nop |
| }
0x00010ebc lw ra, 0x24(sp) | ra = *(var_24h);
0x00010ec0 lw s0, 0x20(sp) | s0 = *(var_20h);
0x00010ec4 addiu sp, sp, 0x28 |
0x00010ec8 jr ra | return v1;
| }
[*] Function printf used 8 times mDNSResponderPosix
