[*] Binary protection state of libipc.so
Full RELRO Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of libipc.so
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/lib/libipc.so @ 0xf78 */
| #include <stdint.h>
|
; (fcn) fcn.00000f78 () | void fcn_00000f78 () {
0x00000f78 lui gp, 2 |
0x00000f7c addiu gp, gp, -0x3f88 |
0x00000f80 addu gp, gp, t9 | gp += t9;
0x00000f84 addiu sp, sp, -0x30 |
0x00000f88 sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x00000f8c sw s3, 0x28(sp) | *(var_28h) = s3;
0x00000f90 sw s2, 0x24(sp) | *(var_24h) = s2;
0x00000f94 sw s1, 0x20(sp) | *(var_20h) = s1;
0x00000f98 sw s0, 0x1c(sp) | *(var_1ch) = s0;
0x00000f9c lw t8, -0x7fe4(gp) | t8 = *((gp - 8185));
0x00000fa0 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00000fa4 lbu v0, 0x50c0(t8) | v0 = *((t8 + 20672));
0x00000fa8 move s1, t8 | s1 = t8;
| if (v0 != 0) {
0x00000fac bnez v0, 0x1034 | goto label_0;
| }
0x00000fb0 lw t8, -0x7f5c(gp) | t8 = *((gp - 8151));
0x00000fb4 lw t8, -0x7fe0(gp) | t8 = *((gp - 8184));
| if (t8 != 0) {
0x00000fb8 beqz t8, 0xfcc |
0x00000fbc lw t9, -0x7f5c(gp) | t9 = *((gp - 8151));
0x00000fc0 lw a0, (t8) | a0 = *(t8);
0x00000fc4 jalr t9 | t9 ();
0x00000fc8 lw gp, 0x10(sp) | gp = *(var_10h);
| }
0x00000fcc lw v0, -0x7fe4(gp) | v0 = *((gp - 8185));
0x00000fd0 lw s2, -0x7fdc(gp) | s2 = *((gp - 8183));
0x00000fd4 addiu v0, v0, 0x4ff4 | v0 += 0x4ff4;
0x00000fd8 subu s2, s2, v0 | __asm ("subu s2, s2, v0");
0x00000fdc move s3, v0 | s3 = v0;
0x00000fe0 sra s2, s2, 2 | s2 >>= 2;
0x00000fe4 lw s0, -0x7fe4(gp) | s0 = *((gp - 8185));
0x00000fe8 addiu s2, s2, -1 | s2 += -1;
| do {
0x00000fec lw v0, 0x50c4(s0) | v0 = *((s0 + 5169));
0x00000ff0 sltu t8, v0, s2 | t8 = (v0 < s2) ? 1 : 0;
0x00000ff4 addiu v0, v0, 1 | v0++;
| if (t8 == 0) {
0x00000ff8 beqz t8, 0x101c | goto label_1;
| }
0x00000ffc sw v0, 0x50c4(s0) | *((s0 + 5169)) = v0;
0x00001000 sll v0, v0, 2 | v0 <<= 2;
0x00001004 addu v0, s3, v0 | v0 = s3 + v0;
0x00001008 lw t9, (v0) | t9 = *(v0);
0x0000100c jalr t9 | t9 ();
0x00001010 nop |
0x00001014 lw gp, 0x10(sp) | gp = *(var_10h);
0x00001018 b 0xfec |
| } while (1);
| label_1:
0x0000101c lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
0x00001020 addiu t9, t9, 0xee0 | t9 += entry0;
0x00001024 jalr t9 | t9 ();
0x00001028 nop |
0x0000102c addiu t8, zero, 1 | t8 = 1;
0x00001030 sb t8, 0x50c0(s1) | *((s1 + 20672)) = t8;
| label_0:
0x00001034 lw ra, 0x2c(sp) | ra = *(var_2ch);
0x00001038 lw s3, 0x28(sp) | s3 = *(var_28h);
0x0000103c lw s2, 0x24(sp) | s2 = *(var_24h);
0x00001040 lw s1, 0x20(sp) | s1 = *(var_20h);
0x00001044 lw s0, 0x1c(sp) | s0 = *(var_1ch);
0x00001048 addiu sp, sp, 0x30 |
0x0000104c jr ra | return v0;
| }
[*] Function sprintf used 1 times libipc.so