[*] Binary protection state of libmbedtls.so.10
No RELRO No Canary found NX disabled DSO RPATH No RUNPATH Symbols
[*] Function sprintf tear down of libmbedtls.so.10
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/2097216-5451840.squashfs_v4_le_extract/thirdlib/libmbedtls.so.10 @ 0x3eb0 */
| #include <stdint.h>
|
; (fcn) sym.__do_global_dtors_aux () | void do_global_dtors_aux () {
0x00003eb0 lui gp, 5 |
0x00003eb4 addiu gp, gp, -0x2850 |
0x00003eb8 addu gp, gp, t9 | gp += t9;
0x00003ebc addiu sp, sp, -0x30 |
0x00003ec0 sw s3, 0x28(sp) | *(var_28h) = s3;
0x00003ec4 lw s3, -0x7fe4(gp) | s3 = *((gp - 8185));
0x00003ec8 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00003ecc sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x00003ed0 lbu v0, -0x6650(s3) | v0 = *((s3 - 26192));
0x00003ed4 sw s2, 0x24(sp) | *(var_24h) = s2;
0x00003ed8 sw s1, 0x20(sp) | *(var_20h) = s1;
0x00003edc sw s0, 0x1c(sp) | *(var_1ch) = s0;
0x00003ee0 lw v0, -0x7d30(gp) | v0 = *((gp - 8012));
| if (v0 != 0) {
0x00003ee4 bnez v0, 0x3f9c | goto label_1;
| }
0x00003ee8 lw v0, -0x7fe0(gp) | v0 = *(gp);
| if (v0 != 0) {
0x00003eec beqz v0, 0x3f00 |
0x00003ef0 lw t9, -0x7d30(gp) | t9 = *((gp - 8012));
0x00003ef4 lw a0, (v0) | a0 = *(v0);
0x00003ef8 jalr t9 | t9 ();
0x00003efc lw gp, 0x10(sp) | gp = *(var_10h);
| }
0x00003f00 lw s2, -0x7fe4(gp) | s2 = *((gp - 8185));
0x00003f04 lw s0, -0x7fe4(gp) | s0 = *((gp - 8185));
0x00003f08 lw s1, -0x7fdc(gp) | s1 = *(gp);
| /* obj.__DTOR_LIST__ */
0x00003f0c addiu s2, s2, -0x7ff8 | s2 += -0x7ff8;
0x00003f10 lw v0, -0x664c(s0) | v0 = *((s0 - 6547));
0x00003f14 subu s1, s1, s2 | __asm ("subu s1, s1, s2");
0x00003f18 sra s1, s1, 2 | s1 >>= 2;
0x00003f1c addiu s1, s1, -1 | s1 += -1;
0x00003f20 sltu v1, v0, s1 | v1 = (v0 < s1) ? 1 : 0;
0x00003f24 lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
| if (v1 == 0) {
0x00003f28 beqz v1, 0x3f58 | goto label_2;
| }
| do {
0x00003f2c addiu v0, v0, 1 | v0++;
0x00003f30 sll v1, v0, 2 | v1 = v0 << 2;
0x00003f34 addu v1, s2, v1 | v1 = s2 + v1;
0x00003f38 lw t9, (v1) | t9 = *(v1);
0x00003f3c sw v0, -0x664c(s0) | *((s0 - 6547)) = v0;
0x00003f40 jalr t9 | t9 ();
0x00003f44 lw v0, -0x664c(s0) | v0 = *((s0 - 6547));
0x00003f48 sltu v1, v0, s1 | v1 = (v0 < s1) ? 1 : 0;
0x00003f4c lw gp, 0x10(sp) | gp = *(var_10h);
0x00003f50 bnez v1, 0x3f2c |
| } while (v1 != 0);
0x00003f54 lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
| label_2:
0x00003f58 addiu t9, t9, 0x3e20 | t9 += entry0;
0x00003f5c bal 0x3e20 | entry0 ();
0x00003f60 nop |
0x00003f64 lw gp, 0x10(sp) | gp = *(var_10h);
0x00003f68 lw v0, -0x7e60(gp) | v0 = *((gp - 8088));
0x00003f6c lw a0, -0x7e98(gp) | a0 = *((gp - 8102));
| if (v0 == 0) {
0x00003f70 beqz v0, 0x3fb8 | goto label_3;
| }
0x00003f74 lw v0, -0x7e00(gp) | v0 = *((gp - 8064));
| if (a0 == 0) {
0x00003f78 beqz a0, 0x3fbc | goto label_4;
| }
0x00003f7c lb v0, (a0) | v0 = *(a0);
0x00003f80 slti v0, v0, 2 | v0 = (v0 < 2) ? 1 : 0;
0x00003f84 lw t9, -0x7e00(gp) | t9 = *((gp - 8064));
| if (v0 != 0) {
0x00003f88 bnez v0, 0x3fb8 | goto label_3;
| }
0x00003f8c jalr t9 | t9 ();
0x00003f90 nop |
| do {
0x00003f94 addiu v0, zero, 1 | v0 = 1;
| label_0:
0x00003f98 sb v0, -0x6650(s3) | *((s3 - 26192)) = v0;
| label_1:
0x00003f9c lw ra, 0x2c(sp) | ra = *(var_2ch);
0x00003fa0 lw s3, 0x28(sp) | s3 = *(var_28h);
0x00003fa4 lw s2, 0x24(sp) | s2 = *(var_24h);
0x00003fa8 lw s1, 0x20(sp) | s1 = *(var_20h);
0x00003fac lw s0, 0x1c(sp) | s0 = *(var_1ch);
0x00003fb0 addiu sp, sp, 0x30 |
0x00003fb4 jr ra | return v0;
| label_3:
0x00003fb8 lw v0, -0x7e00(gp) | v0 = *((gp - 8064));
| label_4:
0x00003fbc lw a0, -0x7fd4(gp) | a0 = *((gp - 8181));
0x00003fc0 beqz v0, 0x3f94 |
| } while (v0 == 0);
0x00003fc4 lw t9, -0x7e00(gp) | t9 = *((gp - 8064));
| /* obj.__EH_FRAME_BEGIN__ */
0x00003fc8 addiu a0, a0, 0x7f00 | a0 += 0x7f00;
0x00003fcc jalr t9 | t9 ();
0x00003fd0 addiu v0, zero, 1 | v0 = 1;
0x00003fd4 b 0x3f98 | goto label_0;
| }
[*] Function sprintf used 1 times libmbedtls.so.10
