[*] Binary protection state of igmpproxy
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function system tear down of igmpproxy
lui s0, 0x42
lw a0, -0x47e0(s0)
nop
beqz a0, 0x401d14
nop
lw t9, -sym.sloop_cancel_read_sock(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
sw zero, -0x47e0(s0)
lw v0, -obj.o_helperscript(gp)
nop
lw a3, (v0)
nop
beqz a3, 0x401d68
addiu s0, sp, 0x18
lw t9, -sym.imp.snprintf(gp)
lui a2, 0x41
addiu a2, a2, -0x584c
move a0, s0
jalr t9
addiu a1, zero, 0x7f
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
nop
lw v0, -obj.o_helperscript(gp)
lw t9, -sym.mrt_deinit(gp)
nop
jalr t9
sw zero, (v0)
lw gp, 0x10(sp)
nop
lw t9, -sym.mrtapi_deinit(gp)
nop
jalr t9
nop
lw ra, 0x9c(sp)
lw gp, 0x10(sp)
lw s0, 0x98(sp)
jr ra
--
nop
jalr t9
nop
lw gp, 0x10(sp)
move a0, v0
lw t9, -sym.sopt_set_multicast_loop(gp)
nop
jalr t9
move a1, zero
lw gp, 0x10(sp)
nop
lw v0, -obj.o_helperscript(gp)
nop
lw a3, (v0)
nop
beqz a3, 0x40226c
addiu s0, sp, 0x38
lw t9, -sym.imp.snprintf(gp)
lui a2, 0x41
addiu a2, a2, -0x584c
move a0, s0
jalr t9
addiu a1, zero, 0x7f
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
nop
lw t9, -sym.mrtapi_sock(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.sloop_register_read_sock(gp)
move a0, v0
addiu a1, a1, 0x249c
jalr t9
move a2, zero
lw ra, 0xec(sp)
lui v1, 0x42
lw gp, 0x10(sp)
lw fp, 0xe8(sp)
--
addiu s1, sp, 0x98
sw v0, 0x1c(sp)
sw a2, 0x38(sp)
addiu v0, zero, 0x5e
srl s0, s0, 0x10
lui a2, 0x41
sw v1, 0x2c(sp)
sw a0, 0x30(sp)
sw a1, 0x34(sp)
sw a3, 0x3c(sp)
sw t0, 0x40(sp)
sw t1, 0x44(sp)
sw t2, 0x48(sp)
addiu a2, a2, -0x52d8
move a3, s3
move a0, s1
addiu a1, zero, 0x7f
sw s5, 0x10(sp)
sw s4, 0x18(sp)
sw v0, 0x24(sp)
sw s0, 0x28(sp)
jalr t9
sw zero, 0x20(sp)
lw gp, 0x50(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s1
lw gp, 0x50(sp)
nop
lw t9, -sym.imp.free(gp)
nop
jalr t9
move a0, s2
lw ra, 0x134(sp)
lw gp, 0x50(sp)
lw s5, 0x130(sp)
lw s4, 0x12c(sp)
lw s3, 0x128(sp)
lw s2, 0x124(sp)
lw s1, 0x120(sp)
lw s0, 0x11c(sp)
jr ra
addiu sp, sp, 0x138
lui gp, 0x42
--
beqz s2, 0x4049ac
move s3, a0
lw v0, 0x10(a0)
lw t9, -sym.imp.inet_ntoa(gp)
lw a0, 8(v0)
jalr t9
addiu s1, sp, 0x20
lw gp, 0x18(sp)
lhu a0, 0x14(s3)
lw t9, -sym.vifs_get_name(gp)
nop
jalr t9
move s0, v0
lw gp, 0x18(sp)
lui a2, 0x41
lw t9, -sym.imp.snprintf(gp)
addiu a2, a2, -0x5278
move a3, s2
move a0, s1
addiu a1, zero, 0x7f
sw s0, 0x10(sp)
jalr t9
sw v0, 0x14(sp)
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s1
lw gp, 0x18(sp)
b 0x4049d8
addiu s0, s3, 8
lw v1, 4(a1)
lw v0, (a1)
nop
sw v0, (v1)
sw v1, 4(v0)
sw zero, (a1)
jal 0x404730
sw zero, 4(a1)
lw gp, 0x18(sp)
lw a1, 8(s3)
nop
bne a1, s0, 0x4049b4
move a0, a1
lw a0, 0x1c(s3)
--
sh s5, 0x14(s3)
beqz s4, 0x406234
sw v0, 4(s3)
lw t9, -sym.imp.inet_ntoa(gp)
lw a0, 8(s2)
jalr t9
addiu s1, sp, 0xd8
lw gp, 0x50(sp)
move a0, s5
lw t9, -sym.vifs_get_name(gp)
nop
jalr t9
move s0, v0
lw gp, 0x50(sp)
lui a2, 0x41
lw t9, -sym.imp.snprintf(gp)
addiu a2, a2, -0x5108
move a3, s4
move a0, s1
addiu a1, zero, 0x7f
sw s0, 0x10(sp)
jalr t9
sw v0, 0x14(sp)
lw gp, 0x50(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s1
jal 0x4050a4
move a0, s2
lw gp, 0x50(sp)
nop
lw t9, -sym.imp.inet_ntoa(gp)
nop
jalr t9
move a0, s6
lw gp, 0x50(sp)
move a1, v0
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a0, sp, 0xb8
lw gp, 0x50(sp)
addiu s0, s3, 8
b 0x40628c
--
addiu s2, sp, 0x158
sw v0, 0x1c(sp)
sw a2, 0x38(sp)
addiu v0, zero, 0x5e
srl s0, s0, 0x10
lui a2, 0x41
sw a0, 0x30(sp)
sw a1, 0x34(sp)
sw a3, 0x3c(sp)
move a0, s2
sw s1, 0x10(sp)
sw s5, 0x18(sp)
sw v0, 0x24(sp)
sw s0, 0x28(sp)
sw v1, 0x2c(sp)
sw t0, 0x40(sp)
sw t1, 0x44(sp)
sw t2, 0x48(sp)
addiu a2, a2, -0x50c8
move a3, s4
sw zero, 0x20(sp)
jalr t9
addiu a1, zero, 0x7f
lw gp, 0x50(sp)
move a0, s2
lw t9, -sym.imp.system(gp)
nop
jalr t9
nop
lw gp, 0x50(sp)
lw a0, 0x1c(s3)
nop
beqz a0, 0x406478
nop
lw t9, -sym.sloop_cancel_timeout(gp)
nop
jalr t9
nop
lw gp, 0x50(sp)
nop
lw t9, -sym.sloop_register_timeout(gp)
lui a2, 0x40
addiu a2, a2, 0x54bc
addiu a0, zero, 0x7d
move a1, zero
jalr t9
--
lw s2, 0x2c(sp)
lw s1, 0x28(sp)
lw s0, 0x24(sp)
jr ra
addiu sp, sp, 0x38
lui gp, 0x42
addiu sp, sp, -0x428
addiu gp, gp, 0x35d0
sw ra, 0x424(sp)
sw s0, 0x420(sp)
sw gp, 0x10(sp)
addiu v0, sp, 0x42c
addiu s0, sp, 0x1c
lw t9, -sym.imp.vsnprintf(gp)
sw a1, 0x42c(sp)
sw a2, 0x430(sp)
sw a3, 0x434(sp)
move a2, a0
move a3, v0
move a0, s0
sw v0, 0x18(sp)
jalr t9
addiu a1, zero, 0x400
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s0
lw ra, 0x424(sp)
lw gp, 0x10(sp)
lw s0, 0x420(sp)
jr ra
addiu sp, sp, 0x428
lui gp, 0x42
addiu sp, sp, -0x438
addiu gp, gp, 0x35d0
sw ra, 0x434(sp)
sw s4, 0x430(sp)
sw s3, 0x42c(sp)
sw s2, 0x428(sp)
sw s1, 0x424(sp)
sw s0, 0x420(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.vsnprintf(gp)
addiu v0, sp, 0x444
[*] Function system used 7 times igmpproxy
