[*] Binary protection state of pullEngine
No RELRO Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function printf tear down of pullEngine
lw t8, -0x7ecc(gp)
lw t8, (t8)
sw t8, 0x24(fp)
lw t8, 0x18(fp)
lw v0, (t8)
addiu t8, zero, 1
beq v0, t8, 0x401c44
nop
lw t8, 0x1c(fp)
lw v0, (t8)
addiu t8, zero, 1
bne v0, t8, 0x401c44
nop
lw t8, 0x18(fp)
addiu v0, zero, 1
sw v0, (t8)
lw t8, 0x18(fp)
addiu v0, t8, 4
lw t8, 0x1c(fp)
addiu t8, t8, 0x88
move a0, v0
addiu a1, zero, 0x80
lw v0, -segment.LOAD0(gp)
addiu a2, v0, 0x7aa8
move a3, t8
lw t8, -sym.imp.snprintf(gp)
move t9, t8
jalr t9
nop
lw gp, 0x10(fp)
lw t8, 0x18(fp)
sb zero, 0x88(t8)
lw t8, 0x18(fp)
lw t8, 0x8c(t8)
blez t8, 0x401bf0
nop
lw t8, -obj.isReload(gp)
addiu v0, zero, 1
sb v0, (t8)
lw t8, 0x1c(fp)
lw v1, 0x10c(t8)
lw t8, 0x1c(fp)
addiu v0, t8, 0x108
lw t8, 0x1c(fp)
addiu t8, t8, 0x110
move a0, v1
--
addiu t8, zero, 1
bne v0, t8, 0x40203c
nop
lw t8, 0x1c(fp)
lw v0, (t8)
addiu t8, zero, 4
bne v0, t8, 0x40203c
nop
lw t8, 0x18(fp)
lw v0, (t8)
lw t8, 0x1c(fp)
sw v0, 4(t8)
lw t8, 0x18(fp)
lw t8, 0x8c(t8)
beqz t8, 0x401ff0
nop
lw t8, 0x1c(fp)
addiu v0, t8, 0xc
lw t8, 0x18(fp)
addiu t8, t8, 4
move a0, v0
addiu a1, zero, 0x80
lw v0, -segment.LOAD0(gp)
addiu a2, v0, 0x7aa8
move a3, t8
lw t8, -sym.imp.snprintf(gp)
move t9, t8
jalr t9
nop
lw gp, 0x10(fp)
lw t8, 0x18(fp)
lbu v0, 0x88(t8)
lw t8, 0x1c(fp)
sb v0, 0x90(t8)
lw t8, 0x18(fp)
lw v0, 0x8c(t8)
lw t8, 0x1c(fp)
sw v0, 0x94(t8)
lw t8, 0x18(fp)
lbu t8, 0x88(t8)
bnez t8, 0x401fe8
nop
lw t8, 0x18(fp)
addiu v0, zero, 1
sb v0, 0x88(t8)
lw t8, 0x18(fp)
--
addiu t8, t8, 0x1b0
lw t8, (t8)
addiu v0, fp, 0x68
move a0, v0
lw a1, 0x3c(fp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu t8, fp, 0x68
move a0, t8
lw t8, -method.std::string.c_str___const(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
move t8, v0
addiu v0, fp, 0x9cc
lw v1, 0x40(fp)
sw v1, 0x10(sp)
move a0, v0
addiu a1, zero, 0x40
lw v0, -segment.LOAD0(gp)
addiu a2, v0, 0x7aac
move a3, t8
lw t8, -sym.imp.snprintf(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu t8, fp, 0x68
move a0, t8
lw t8, -0x7f00(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu t8, fp, 0x68
move a0, t8
lw t8, -method.IpcDaemon.IpcDaemon__(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu v0, fp, 0x68
addiu t8, fp, 0x9cc
--
lw t8, 0xf4(fp)
bnez t8, 0x402c4c
nop
addiu v0, fp, 0xa0c
addiu t8, zero, 0x40
move a0, v0
move a1, zero
move a2, t8
lw t8, -sym.imp.memset(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu t8, fp, 0xa0c
lw v0, -segment.LOAD0(gp)
addiu v0, v0, 0x7ac4
sw v0, 0x10(sp)
lw v0, 0x40(fp)
sw v0, 0x14(sp)
move a0, t8
addiu a1, zero, 0x40
lw t8, -segment.LOAD0(gp)
addiu a2, t8, 0x7ab4
lw t8, -segment.LOAD0(gp)
addiu a3, t8, 0x7abc
lw t8, -sym.imp.snprintf(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu t8, fp, 0xa0c
move a0, t8
lw t8, -sym.imp.unlink(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
lw a0, 0x44(fp)
lw t8, -sym.imp.close(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu t8, fp, 0x9cc
move a0, t8
lw t8, -sym.imp.unlink(gp)
--
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
addiu t8, fp, 0x2c
move a0, t8
move a1, zero
addiu a2, zero, 1
lw t8, -sym.imp.memset(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
lw t8, 0xf4(fp)
andi t8, t8, 0xff
sb t8, 0x2c(fp)
addiu t8, fp, 0x9ac
lw v0, 0x40(fp)
sw v0, 0x10(sp)
move a0, t8
addiu a1, zero, 0x20
lw t8, -segment.LOAD0(gp)
addiu a2, t8, 0x7aac
lw t8, -segment.LOAD0(gp)
addiu a3, t8, 0x7ad0
lw t8, -sym.imp.snprintf(gp)
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
lw t8, 0x3c(fp)
lw t8, (t8)
addiu t8, t8, 0x34
lw t8, (t8)
addiu v1, fp, 0x9ac
addiu v0, fp, 0x2c
lw a0, 0x3c(fp)
move a1, v1
move a2, v0
move t9, t8
jalr t9
nop
lw gp, 0x18(fp)
lw t8, -obj.isExit(gp)
lbu t8, (t8)
xori t8, t8, 1
[*] Function printf used 5 times pullEngine
