[*] Binary protection state of librtk_misc_helper.so
Full RELRO Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of librtk_misc_helper.so
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/lib/librtk_misc_helper.so @ 0x10e8 */
| #include <stdint.h>
|
; (fcn) fcn.000010e8 () | void fcn_000010e8 () {
0x000010e8 lui gp, 2 |
0x000010ec addiu gp, gp, -0x20e8 |
0x000010f0 addu gp, gp, t9 | gp += t9;
0x000010f4 addiu sp, sp, -0x30 |
0x000010f8 sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x000010fc sw s3, 0x28(sp) | *(var_28h) = s3;
0x00001100 sw s2, 0x24(sp) | *(var_24h) = s2;
0x00001104 sw s1, 0x20(sp) | *(var_20h) = s1;
0x00001108 sw s0, 0x1c(sp) | *(var_1ch) = s0;
0x0000110c lw t8, -0x7fe4(gp) | t8 = *((gp - 8185));
0x00001110 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00001114 lbu v0, 0x7100(t8) | v0 = *((t8 + 28928));
0x00001118 move s1, t8 | s1 = t8;
| if (v0 != 0) {
0x0000111c bnez v0, 0x11a4 | goto label_0;
| }
0x00001120 lw t8, -0x7f48(gp) | t8 = *((gp - 8146));
0x00001124 lw t8, -0x7fe0(gp) | t8 = *((gp - 8184));
| if (t8 != 0) {
0x00001128 beqz t8, 0x113c |
0x0000112c lw t9, -0x7f48(gp) | t9 = *((gp - 8146));
0x00001130 lw a0, (t8) | a0 = *(t8);
0x00001134 jalr t9 | t9 ();
0x00001138 lw gp, 0x10(sp) | gp = *(var_10h);
| }
0x0000113c lw v0, -0x7fe4(gp) | v0 = *((gp - 8185));
0x00001140 lw s2, -0x7fdc(gp) | s2 = *((gp - 8183));
0x00001144 addiu v0, v0, 0x6fe4 | v0 += 0x6fe4;
0x00001148 subu s2, s2, v0 | __asm ("subu s2, s2, v0");
0x0000114c move s3, v0 | s3 = v0;
0x00001150 sra s2, s2, 2 | s2 >>= 2;
0x00001154 lw s0, -0x7fe4(gp) | s0 = *((gp - 8185));
0x00001158 addiu s2, s2, -1 | s2 += -1;
| do {
0x0000115c lw v0, 0x7104(s0) | v0 = *((s0 + 7233));
0x00001160 sltu t8, v0, s2 | t8 = (v0 < s2) ? 1 : 0;
0x00001164 addiu v0, v0, 1 | v0++;
| if (t8 == 0) {
0x00001168 beqz t8, 0x118c | goto label_1;
| }
0x0000116c sw v0, 0x7104(s0) | *((s0 + 7233)) = v0;
0x00001170 sll v0, v0, 2 | v0 <<= 2;
0x00001174 addu v0, s3, v0 | v0 = s3 + v0;
0x00001178 lw t9, (v0) | t9 = *(v0);
0x0000117c jalr t9 | t9 ();
0x00001180 nop |
0x00001184 lw gp, 0x10(sp) | gp = *(var_10h);
0x00001188 b 0x115c |
| } while (1);
| label_1:
0x0000118c lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
0x00001190 addiu t9, t9, 0x1050 | t9 += entry0;
0x00001194 jalr t9 | t9 ();
0x00001198 nop |
0x0000119c addiu t8, zero, 1 | t8 = 1;
0x000011a0 sb t8, 0x7100(s1) | *((s1 + 28928)) = t8;
| label_0:
0x000011a4 lw ra, 0x2c(sp) | ra = *(var_2ch);
0x000011a8 lw s3, 0x28(sp) | s3 = *(var_28h);
0x000011ac lw s2, 0x24(sp) | s2 = *(var_24h);
0x000011b0 lw s1, 0x20(sp) | s1 = *(var_20h);
0x000011b4 lw s0, 0x1c(sp) | s0 = *(var_1ch);
0x000011b8 addiu sp, sp, 0x30 |
0x000011bc jr ra | return v0;
| }
[*] Function sprintf used 1 times librtk_misc_helper.so