[*] Binary protection state of dnsmasq
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of dnsmasq
sltiu v0, v0, 2
lw gp, 0x18(sp)
beqz v0, 0x414e20
nop
lw v0, -obj.dnsmasq_daemon(gp)
nop
lw v0, (v0)
nop
lw a0, 0x50(v0)
nop
beqz a0, 0x414b74
nop
lw t9, -sym.imp.fopen64(gp)
lui a1, 0x42
jalr t9
addiu a1, a1, 0x3a80
lw gp, 0x18(sp)
beqz v0, 0x414b38
move s0, v0
lw t9, -sym.imp.getpid(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
lui a1, 0x42
lw t9, -sym.imp.fprintf(gp)
addiu a1, a1, 0x3a84
move a2, v0
jalr t9
move a0, s0
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.fclose(gp)
nop
jalr t9
move a0, s0
lw gp, 0x18(sp)
b 0x414b74
nop
lw t9, -sym.imp.getuid(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
bnez v0, 0x414b74
nop
--
addiu s1, s0, 0x38
lw t9, -sym.cache_add_dhcp_entry(gp)
bnez s0, 0x418ad0
move a1, s1
lui v0, 0x43
sw zero, 0x5f58(v0)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
lui gp, 0x44
addiu sp, sp, -0x28
addiu gp, gp, -0x2700
sw ra, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x10(sp)
lw v0, (a0)
addiu v1, sp, 0x30
move s0, a0
sw a2, 0x30(sp)
sw a3, 0x34(sp)
bnez v0, 0x418ba8
sw v1, 0x18(sp)
lw v0, -obj.dnsmasq_daemon(gp)
lw t9, -sym.imp.vfprintf(gp)
lw v0, (v0)
nop
lw a0, 0x394(v0)
jalr t9
move a2, v1
lw gp, 0x10(sp)
bgez v0, 0x418ba8
nop
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
lw v0, (v0)
lw gp, 0x10(sp)
sw v0, (s0)
lw ra, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x28
lui gp, 0x44
--
sw s4, 0x38(sp)
sw s3, 0x34(sp)
sw s2, 0x30(sp)
sw s1, 0x2c(sp)
sw s0, 0x28(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.getpid(gp)
sw a2, 0x48(sp)
sw a3, 0x4c(sp)
move s4, a0
jalr t9
move s2, a1
lui v1, 0x43
lw v1, 0x5f90(v1)
lw gp, 0x10(sp)
beqz v1, 0x41ffb4
move s3, v0
lw s0, -0x7de8(gp)
lw t9, -sym.imp.fputs(gp)
lw a1, (s0)
lui a0, 0x42
jalr t9
addiu a0, a0, 0x46e0
lw gp, 0x10(sp)
addiu v0, sp, 0x48
lw t9, -sym.imp.vfprintf(gp)
lw a0, (s0)
move a2, v0
move a1, s2
jalr t9
sw v0, 0x18(sp)
lw gp, 0x10(sp)
lw a1, (s0)
lw t9, -sym.imp.fputc(gp)
nop
jalr t9
addiu a0, zero, 0xa
lw gp, 0x10(sp)
lui v0, 0x43
lw v1, 0x58f0(v0)
addiu v0, zero, -1
bne v1, v0, 0x420024
lui v1, 0x43
lui s0, 0x43
lw v0, 0x5fac(s0)
nop
[*] Function fprintf used 3 times dnsmasq
