[*] Binary protection state of mod_privacy_cgi.so

  	No RELRO       No Canary found   NX disabled  DSO          RPATH        No RUNPATH   No Symbols

[*] Function sprintf tear down of mod_privacy_cgi.so

    ; assembly                               | /* r2dec pseudo code output */

                                             | /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/lib/mod_privacy_cgi.so @ 0xab8 */

                                             | #include <stdint.h>

                                             |  

    ; (fcn) fcn.00000ab8 ()                  | void fcn_00000ab8 () {

    0x00000ab8 lui gp, 2                     |     

    0x00000abc addiu gp, gp, -0x7398         |     

    0x00000ac0 addu gp, gp, t9               |     gp += t9;

    0x00000ac4 addiu sp, sp, -0x30           |     

    0x00000ac8 sw ra, 0x2c(sp)               |     *(var_2ch) = ra;

    0x00000acc sw s3, 0x28(sp)               |     *(var_28h) = s3;

    0x00000ad0 sw s2, 0x24(sp)               |     *(var_24h) = s2;

    0x00000ad4 sw s1, 0x20(sp)               |     *(var_20h) = s1;

    0x00000ad8 sw s0, 0x1c(sp)               |     *(var_1ch) = s0;

    0x00000adc lw t8, -0x7fe4(gp)            |     t8 = *((gp - 8185));

    0x00000ae0 sw gp, 0x10(sp)               |     *(var_10h) = gp;

    0x00000ae4 lbu v0, 0x1790(t8)            |     v0 = *((t8 + 6032));

    0x00000ae8 move s1, t8                   |     s1 = t8;

                                             |     if (v0 != 0) {

    0x00000aec bnez v0, 0xb74                |         goto label_0;

                                             |     }

    0x00000af0 lw t8, -0x7fa0(gp)            |     t8 = *((gp - 8168));

    0x00000af4 lw t8, -0x7fe0(gp)            |     t8 = *((gp - 8184));

                                             |     if (t8 != 0) {

    0x00000af8 beqz t8, 0xb0c                |         

    0x00000afc lw t9, -0x7fa0(gp)            |         t9 = *((gp - 8168));

    0x00000b00 lw a0, (t8)                   |         a0 = *(t8);

    0x00000b04 jalr t9                       |         t9 ();

    0x00000b08 lw gp, 0x10(sp)               |         gp = *(var_10h);

                                             |     }

    0x00000b0c lw v0, -0x7fe4(gp)            |     v0 = *((gp - 8185));

    0x00000b10 lw s2, -0x7fdc(gp)            |     s2 = *((gp - 8183));

    0x00000b14 addiu v0, v0, 0x15ec          |     v0 += 0x15ec;

    0x00000b18 subu s2, s2, v0               |     __asm ("subu s2, s2, v0");

    0x00000b1c move s3, v0                   |     s3 = v0;

    0x00000b20 sra s2, s2, 2                 |     s2 >>= 2;

    0x00000b24 lw s0, -0x7fe4(gp)            |     s0 = *((gp - 8185));

    0x00000b28 addiu s2, s2, -1              |     s2 += -1;

                                             |     do {

    0x00000b2c lw v0, 0x1794(s0)             |         v0 = *((s0 + 1509));

    0x00000b30 sltu t8, v0, s2               |         t8 = (v0 < s2) ? 1 : 0;

    0x00000b34 addiu v0, v0, 1               |         v0++;

                                             |         if (t8 == 0) {

    0x00000b38 beqz t8, 0xb5c                |             goto label_1;

                                             |         }

    0x00000b3c sw v0, 0x1794(s0)             |         *((s0 + 1509)) = v0;

    0x00000b40 sll v0, v0, 2                 |         v0 <<= 2;

    0x00000b44 addu v0, s3, v0               |         v0 = s3 + v0;

    0x00000b48 lw t9, (v0)                   |         t9 = *(v0);

    0x00000b4c jalr t9                       |         t9 ();

    0x00000b50 nop                           |         

    0x00000b54 lw gp, 0x10(sp)               |         gp = *(var_10h);

    0x00000b58 b 0xb2c                       |         

                                             |     } while (1);

                                             | label_1:

    0x00000b5c lw t9, -0x7fd8(gp)            |     t9 = *((gp - 8182));

    0x00000b60 addiu t9, t9, 0xa20           |     t9 += entry0;

    0x00000b64 jalr t9                       |     t9 ();

    0x00000b68 nop                           |     

    0x00000b6c addiu t8, zero, 1             |     t8 = 1;

    0x00000b70 sb t8, 0x1790(s1)             |     *((s1 + 6032)) = t8;

                                             | label_0:

    0x00000b74 lw ra, 0x2c(sp)               |     ra = *(var_2ch);

    0x00000b78 lw s3, 0x28(sp)               |     s3 = *(var_28h);

    0x00000b7c lw s2, 0x24(sp)               |     s2 = *(var_24h);

    0x00000b80 lw s1, 0x20(sp)               |     s1 = *(var_20h);

    0x00000b84 lw s0, 0x1c(sp)               |     s0 = *(var_1ch);

    0x00000b88 addiu sp, sp, 0x30            |     

    0x00000b8c jr ra                         |     return v0;

                                             | }

[*] Function sprintf used 1 times mod_privacy_cgi.so