[*] Binary protection state of mod_cgi.so
No RELRO No Canary found NX disabled DSO RPATH No RUNPATH No Symbols
[*] Function popen tear down of mod_cgi.so
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/lib/mod_cgi.so @ 0x1258 */
| #include <stdint.h>
|
; (fcn) fcn.00001258 () | void fcn_00001258 () {
0x00001258 lui gp, 2 |
0x0000125c addiu gp, gp, -0x44e8 |
0x00001260 addu gp, gp, t9 | gp += t9;
0x00001264 addiu sp, sp, -0x30 |
0x00001268 sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x0000126c sw s3, 0x28(sp) | *(var_28h) = s3;
0x00001270 sw s2, 0x24(sp) | *(var_24h) = s2;
0x00001274 sw s1, 0x20(sp) | *(var_20h) = s1;
0x00001278 sw s0, 0x1c(sp) | *(var_1ch) = s0;
0x0000127c lw t8, -0x7fe4(gp) | t8 = *((gp - 8185));
0x00001280 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00001284 lbu v0, 0x4ef0(t8) | v0 = *((t8 + 20208));
0x00001288 move s1, t8 | s1 = t8;
| if (v0 != 0) {
0x0000128c bnez v0, 0x1314 | goto label_0;
| }
0x00001290 lw t8, -0x7ea8(gp) | t8 = *((gp - 8106));
0x00001294 lw t8, -0x7fe0(gp) | t8 = *((gp - 8184));
| if (t8 != 0) {
0x00001298 beqz t8, 0x12ac |
0x0000129c lw t9, -0x7ea8(gp) | t9 = *((gp - 8106));
0x000012a0 lw a0, (t8) | a0 = *(t8);
0x000012a4 jalr t9 | t9 ();
0x000012a8 lw gp, 0x10(sp) | gp = *(var_10h);
| }
0x000012ac lw v0, -0x7fe4(gp) | v0 = *((gp - 8185));
0x000012b0 lw s2, -0x7fdc(gp) | s2 = *((gp - 8183));
0x000012b4 addiu v0, v0, 0x4d3c | v0 += 0x4d3c;
0x000012b8 subu s2, s2, v0 | __asm ("subu s2, s2, v0");
0x000012bc move s3, v0 | s3 = v0;
0x000012c0 sra s2, s2, 2 | s2 >>= 2;
0x000012c4 lw s0, -0x7fe4(gp) | s0 = *((gp - 8185));
0x000012c8 addiu s2, s2, -1 | s2 += -1;
| do {
0x000012cc lw v0, 0x4ef4(s0) | v0 = *((s0 + 5053));
0x000012d0 sltu t8, v0, s2 | t8 = (v0 < s2) ? 1 : 0;
0x000012d4 addiu v0, v0, 1 | v0++;
| if (t8 == 0) {
0x000012d8 beqz t8, 0x12fc | goto label_1;
| }
0x000012dc sw v0, 0x4ef4(s0) | *((s0 + 5053)) = v0;
0x000012e0 sll v0, v0, 2 | v0 <<= 2;
0x000012e4 addu v0, s3, v0 | v0 = s3 + v0;
0x000012e8 lw t9, (v0) | t9 = *(v0);
0x000012ec jalr t9 | t9 ();
0x000012f0 nop |
0x000012f4 lw gp, 0x10(sp) | gp = *(var_10h);
0x000012f8 b 0x12cc |
| } while (1);
| label_1:
0x000012fc lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
0x00001300 addiu t9, t9, 0x11c0 | t9 += entry0;
0x00001304 jalr t9 | t9 ();
0x00001308 nop |
0x0000130c addiu t8, zero, 1 | t8 = 1;
0x00001310 sb t8, 0x4ef0(s1) | *((s1 + 20208)) = t8;
| label_0:
0x00001314 lw ra, 0x2c(sp) | ra = *(var_2ch);
0x00001318 lw s3, 0x28(sp) | s3 = *(var_28h);
0x0000131c lw s2, 0x24(sp) | s2 = *(var_24h);
0x00001320 lw s1, 0x20(sp) | s1 = *(var_20h);
0x00001324 lw s0, 0x1c(sp) | s0 = *(var_1ch);
0x00001328 addiu sp, sp, 0x30 |
0x0000132c jr ra | return v0;
| }
[*] Function popen used 1 times mod_cgi.so
