[*] Binary protection state of mod_setenv.so
No RELRO No Canary found NX disabled DSO RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of mod_setenv.so
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/DUMP/mtdblock8_unblob_extracted/mtdblock8_extract/0-9650176.squashfs_v4_le_extract/lib/mod_setenv.so @ 0x988 */
| #include <stdint.h>
|
; (fcn) fcn.00000988 () | void fcn_00000988 () {
0x00000988 lui gp, 2 |
0x0000098c addiu gp, gp, -0x75a8 |
0x00000990 addu gp, gp, t9 | gp += t9;
0x00000994 addiu sp, sp, -0x30 |
0x00000998 sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x0000099c sw s3, 0x28(sp) | *(var_28h) = s3;
0x000009a0 sw s2, 0x24(sp) | *(var_24h) = s2;
0x000009a4 sw s1, 0x20(sp) | *(var_20h) = s1;
0x000009a8 sw s0, 0x1c(sp) | *(var_1ch) = s0;
0x000009ac lw t8, -0x7fe4(gp) | t8 = *((gp - 8185));
0x000009b0 sw gp, 0x10(sp) | *(var_10h) = gp;
0x000009b4 lbu v0, 0x1470(t8) | v0 = *((t8 + 5232));
0x000009b8 move s1, t8 | s1 = t8;
| if (v0 != 0) {
0x000009bc bnez v0, 0xa44 | goto label_0;
| }
0x000009c0 lw t8, -0x7f88(gp) | t8 = *((gp - 8162));
0x000009c4 lw t8, -0x7fe0(gp) | t8 = *((gp - 8184));
| if (t8 != 0) {
0x000009c8 beqz t8, 0x9dc |
0x000009cc lw t9, -0x7f88(gp) | t9 = *((gp - 8162));
0x000009d0 lw a0, (t8) | a0 = *(t8);
0x000009d4 jalr t9 | t9 ();
0x000009d8 lw gp, 0x10(sp) | gp = *(var_10h);
| }
0x000009dc lw v0, -0x7fe4(gp) | v0 = *((gp - 8185));
0x000009e0 lw s2, -0x7fdc(gp) | s2 = *((gp - 8183));
0x000009e4 addiu v0, v0, 0x13a4 | v0 += 0x13a4;
0x000009e8 subu s2, s2, v0 | __asm ("subu s2, s2, v0");
0x000009ec move s3, v0 | s3 = v0;
0x000009f0 sra s2, s2, 2 | s2 >>= 2;
0x000009f4 lw s0, -0x7fe4(gp) | s0 = *((gp - 8185));
0x000009f8 addiu s2, s2, -1 | s2 += -1;
| do {
0x000009fc lw v0, 0x1474(s0) | v0 = *((s0 + 1309));
0x00000a00 sltu t8, v0, s2 | t8 = (v0 < s2) ? 1 : 0;
0x00000a04 addiu v0, v0, 1 | v0++;
| if (t8 == 0) {
0x00000a08 beqz t8, 0xa2c | goto label_1;
| }
0x00000a0c sw v0, 0x1474(s0) | *((s0 + 1309)) = v0;
0x00000a10 sll v0, v0, 2 | v0 <<= 2;
0x00000a14 addu v0, s3, v0 | v0 = s3 + v0;
0x00000a18 lw t9, (v0) | t9 = *(v0);
0x00000a1c jalr t9 | t9 ();
0x00000a20 nop |
0x00000a24 lw gp, 0x10(sp) | gp = *(var_10h);
0x00000a28 b 0x9fc |
| } while (1);
| label_1:
0x00000a2c lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
0x00000a30 addiu t9, t9, 0x8f0 | t9 += entry0;
0x00000a34 jalr t9 | t9 ();
0x00000a38 nop |
0x00000a3c addiu t8, zero, 1 | t8 = 1;
0x00000a40 sb t8, 0x1470(s1) | *((s1 + 5232)) = t8;
| label_0:
0x00000a44 lw ra, 0x2c(sp) | ra = *(var_2ch);
0x00000a48 lw s3, 0x28(sp) | s3 = *(var_28h);
0x00000a4c lw s2, 0x24(sp) | s2 = *(var_24h);
0x00000a50 lw s1, 0x20(sp) | s1 = *(var_20h);
0x00000a54 lw s0, 0x1c(sp) | s0 = *(var_1ch);
0x00000a58 addiu sp, sp, 0x30 |
0x00000a5c jr ra | return v0;
| }
[*] Function sprintf used 1 times mod_setenv.so
