[*] Binary protection state of php-cgi
Full RELRO No Canary found NX enabled No PIE No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of php-cgi
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/1568982-13971496.squashfs_v4_le_extract/usr/bin/php-cgi @ 0x663034 */
| #include <stdint.h>
|
; (fcn) fcn.00663034 () | void fcn_00663034 () {
0x00663034 lui gp, 0xa |
0x00663038 addiu gp, gp, -0xd94 |
0x0066303c addu gp, gp, t9 | gp += t9;
0x00663040 addiu sp, sp, -0x28 |
0x00663044 lw v0, -0x613c(gp) | v0 = *((gp - 6223));
0x00663048 sw a2, 0x30(sp) | *(arg_30h) = a2;
0x0066304c sw a3, 0x34(sp) | *(arg_34h) = a3;
0x00663050 addiu a2, sp, 0x30 | a2 = sp + 0x30;
0x00663054 lw t9, -0x630c(gp) | t9 = sym.imp.vfprintf
0x00663058 lw a0, (v0) | a0 = *(v0);
0x0066305c sw ra, 0x24(sp) | *(var_24h) = ra;
0x00663060 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00663064 sw a2, 0x18(sp) | *(var_18h) = a2;
0x00663068 jalr t9 | t9 ();
0x0066306c nop |
0x00663070 lw ra, 0x24(sp) | ra = *(var_24h);
0x00663074 addiu sp, sp, 0x28 |
0x00663078 jr ra | return v0;
| }
[*] Function fprintf used 2 times php-cgi