[*] Binary protection state of libmxml.so.1.4

  	No RELRO       No Canary found   NX disabled  DSO          RPATH        No RUNPATH   No Symbols

[*] Function popen tear down of libmxml.so.1.4

    ; assembly                               | /* r2dec pseudo code output */

                                             | /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/lib/libmxml.so.1.4 @ 0x1ae8 */

                                             | #include <stdint.h>

                                             |  

    ; (fcn) fcn.00001ae8 ()                  | void fcn_00001ae8 () {

    0x00001ae8 lui gp, 2                     |     

    0x00001aec addiu gp, gp, 0xd58           |     

    0x00001af0 addu gp, gp, t9               |     gp += t9;

    0x00001af4 addiu sp, sp, -0x30           |     

    0x00001af8 sw ra, 0x2c(sp)               |     *(var_2ch) = ra;

    0x00001afc sw s3, 0x28(sp)               |     *(var_28h) = s3;

    0x00001b00 sw s2, 0x24(sp)               |     *(var_24h) = s2;

    0x00001b04 sw s1, 0x20(sp)               |     *(var_20h) = s1;

    0x00001b08 sw s0, 0x1c(sp)               |     *(var_1ch) = s0;

    0x00001b0c lw t8, -0x7fe4(gp)            |     t8 = *((gp - 8185));

    0x00001b10 sw gp, 0x10(sp)               |     *(var_10h) = gp;

    0x00001b14 lbu v0, -0x5690(t8)           |     v0 = *((t8 - 22160));

    0x00001b18 move s1, t8                   |     s1 = t8;

                                             |     if (v0 != 0) {

    0x00001b1c bnez v0, 0x1ba4               |         goto label_0;

                                             |     }

    0x00001b20 lw t8, -0x7f10(gp)            |     t8 = *((gp - 8132));

    0x00001b24 lw t8, -0x7fe0(gp)            |     t8 = *((gp - 8184));

                                             |     if (t8 != 0) {

    0x00001b28 beqz t8, 0x1b3c               |         

    0x00001b2c lw t9, -0x7f10(gp)            |         t9 = *((gp - 8132));

    0x00001b30 lw a0, (t8)                   |         a0 = *(t8);

    0x00001b34 jalr t9                       |         t9 ();

    0x00001b38 lw gp, 0x10(sp)               |         gp = *(var_10h);

                                             |     }

    0x00001b3c lw v0, -0x7fe4(gp)            |     v0 = *((gp - 8185));

    0x00001b40 lw s2, -0x7fdc(gp)            |     s2 = *((gp - 8183));

    0x00001b44 addiu v0, v0, -0x5ff8         |     v0 += -0x5ff8;

    0x00001b48 subu s2, s2, v0               |     __asm ("subu s2, s2, v0");

    0x00001b4c move s3, v0                   |     s3 = v0;

    0x00001b50 sra s2, s2, 2                 |     s2 >>= 2;

    0x00001b54 lw s0, -0x7fe4(gp)            |     s0 = *((gp - 8185));

    0x00001b58 addiu s2, s2, -1              |     s2 += -1;

                                             |     do {

    0x00001b5c lw v0, -0x568c(s0)            |         v0 = *((s0 - 5539));

    0x00001b60 sltu t8, v0, s2               |         t8 = (v0 < s2) ? 1 : 0;

    0x00001b64 addiu v0, v0, 1               |         v0++;

                                             |         if (t8 == 0) {

    0x00001b68 beqz t8, 0x1b8c               |             goto label_1;

                                             |         }

    0x00001b6c sw v0, -0x568c(s0)            |         *((s0 - 5539)) = v0;

    0x00001b70 sll v0, v0, 2                 |         v0 <<= 2;

    0x00001b74 addu v0, s3, v0               |         v0 = s3 + v0;

    0x00001b78 lw t9, (v0)                   |         t9 = *(v0);

    0x00001b7c jalr t9                       |         t9 ();

    0x00001b80 nop                           |         

    0x00001b84 lw gp, 0x10(sp)               |         gp = *(var_10h);

    0x00001b88 b 0x1b5c                      |         

                                             |     } while (1);

                                             | label_1:

    0x00001b8c lw t9, -0x7fd8(gp)            |     t9 = *((gp - 8182));

    0x00001b90 addiu t9, t9, 0x1a50          |     t9 += entry0;

    0x00001b94 jalr t9                       |     t9 ();

    0x00001b98 nop                           |     

    0x00001b9c addiu t8, zero, 1             |     t8 = 1;

    0x00001ba0 sb t8, -0x5690(s1)            |     *((s1 - 22160)) = t8;

                                             | label_0:

    0x00001ba4 lw ra, 0x2c(sp)               |     ra = *(var_2ch);

    0x00001ba8 lw s3, 0x28(sp)               |     s3 = *(var_28h);

    0x00001bac lw s2, 0x24(sp)               |     s2 = *(var_24h);

    0x00001bb0 lw s1, 0x20(sp)               |     s1 = *(var_20h);

    0x00001bb4 lw s0, 0x1c(sp)               |     s0 = *(var_1ch);

    0x00001bb8 addiu sp, sp, 0x30            |     

    0x00001bbc jr ra                         |     return v0;

                                             | }

[*] Function popen used 1 times libmxml.so.1.4