[*] Binary protection state of ddnsd
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of ddnsd
lw gp, 0x10(sp)
b 0x4019ec
sw v0, -0x561c(s4)
lw v0, (s0)
b 0x4019ec
sw v0, -0x560c(s5)
addiu a0, zero, -1
jal 0x40178c
nop
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.getopt(gp)
lw a0, 0xd8(sp)
lw a1, 0xdc(sp)
jalr t9
move a2, fp
lw gp, 0x10(sp)
bgtz v0, 0x40192c
addiu v1, v0, -0x68
lui v0, 0x42
lw v0, -0x5610(v0)
nop
bnez v0, 0x401a4c
lui a2, 0x41
lw v0, -0x7f0c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
lui a1, 0x41
addiu a1, a1, -0x6240
jalr t9
addiu a2, a2, -0x63c0
jal 0x40174c
addiu a0, zero, -1
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.openlog(gp)
lui a0, 0x41
addiu a0, a0, -0x63c0
move a1, zero
jalr t9
addiu a2, zero, 5
lw gp, 0x10(sp)
lui s0, 0x40
lw t9, -sym.sloop_register_signal(gp)
addiu a1, s0, 0x4514
addiu a0, zero, 2
--
jal 0x4015b0
sw zero, 4(a1)
lw gp, 0x10(sp)
lw a1, -0x5608(s1)
nop
bne a1, s3, 0x401bf8
nop
lw t9, -sym.susock_close(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
lui v0, 0x42
lw a0, -0x5610(v0)
lw t9, -sym.imp.unlink(gp)
nop
jalr t9
nop
b 0x401ca8
nop
lw v0, -0x7f0c(gp)
lui a1, 0x41
lui a2, 0x41
lw a3, -0x5610(s1)
lw a0, (v0)
lw t9, -sym.imp.fprintf(gp)
addiu a1, a1, -0x620c
b 0x401ca0
addiu a2, a2, -0x5928
lw v0, -0x7f0c(gp)
lui a2, 0x41
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, -0x61e4
addiu a2, a2, -0x5928
move a3, s2
jalr t9
nop
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.free(gp)
nop
jalr t9
move a0, s2
jal 0x40174c
move a0, zero
lw ra, 0xd4(sp)
lw gp, 0x10(sp)
move v0, zero
lw fp, 0xd0(sp)
lw s7, 0xcc(sp)
lw s6, 0xc8(sp)
--
addiu gp, gp, 0x2b00
sw ra, 0x1c(sp)
sw gp, 0x10(sp)
lw t9, -sym.sloop_terminate(gp)
nop
jalr t9
nop
lw ra, 0x1c(sp)
lw gp, 0x10(sp)
move v0, zero
jr ra
addiu sp, sp, 0x20
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, 0x2b00
sw ra, 0x24(sp)
sw gp, 0x10(sp)
lui v0, 0x42
lw v0, -0x5300(v0)
sw a1, 0x2c(sp)
sw a2, 0x30(sp)
sw a3, 0x34(sp)
beqz v0, 0x404598
move a1, a0
lw v0, -0x7ee0(gp)
lw t9, -sym.imp.vfprintf(gp)
addiu a2, sp, 0x2c
lw a0, (v0)
jalr t9
sw a2, 0x18(sp)
lw gp, 0x10(sp)
lw ra, 0x24(sp)
nop
jr ra
addiu sp, sp, 0x28
nop
nop
lui v0, 0x42
addiu t1, v0, -0x3680
lw t0, 0x10(t1)
lui v0, 0x42
addiu v0, v0, -0x3670
move t2, a0
move t3, a1
beq t0, v0, 0x40461c
move a3, zero
--
addiu sp, sp, 0x30
lui gp, 0x42
addiu sp, sp, -0x138
addiu gp, gp, 0x2b00
sw ra, 0x134(sp)
sw s4, 0x130(sp)
sw s3, 0x12c(sp)
sw s2, 0x128(sp)
sw s1, 0x124(sp)
sw s0, 0x120(sp)
sw gp, 0x10(sp)
move s0, a0
move s2, a1
move s4, a2
beqz a0, 0x405f60
move v0, zero
lw t9, -sym.imp.stat(gp)
nop
jalr t9
addiu a1, sp, 0x88
lw gp, 0x10(sp)
bltz v0, 0x405cf0
lui a1, 0x41
lw v0, -0x7f0c(gp)
lui a2, 0x41
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, -0x57f8
addiu a2, a2, -0x5780
b 0x405d60
move a3, s0
lw t9, -sym.imp.socket(gp)
addiu a0, zero, 1
addiu a1, zero, 2
jalr t9
move a2, zero
lw gp, 0x10(sp)
bgez v0, 0x405d70
move s1, v0
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f0c(gp)
nop
lw s0, (v0)
jalr t9
nop
lw gp, 0x10(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x41
lui a2, 0x41
lw t9, -sym.imp.fprintf(gp)
move a0, s0
addiu a1, a1, -0x57dc
addiu a2, a2, -0x5780
move a3, v0
jalr t9
nop
b 0x405f58
nop
lw t9, -sym.imp.snprintf(gp)
addiu v0, zero, 1
addiu s3, sp, 0x1a
lui a2, 0x41
addiu a2, a2, -0x57c8
move a3, s0
move a0, s3
addiu a1, zero, 0x6c
jalr t9
sh v0, 0x18(sp)
lw gp, 0x10(sp)
move a0, s1
lw t9, -sym.imp.bind(gp)
addiu a1, sp, 0x18
jalr t9
addiu a2, zero, 0x6e
lw gp, 0x10(sp)
bgez v0, 0x405e18
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f0c(gp)
nop
lw s0, (v0)
jalr t9
nop
lw gp, 0x10(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x41
lw t9, -sym.imp.fprintf(gp)
lui a2, 0x41
move a0, s0
addiu a1, a1, -0x57c4
addiu a2, a2, -0x5780
jalr t9
move a3, v0
b 0x405e54
nop
lw t9, -sym.imp.malloc(gp)
nop
jalr t9
addiu a0, zero, 0x14
lw gp, 0x10(sp)
bnez v0, 0x405e74
move s0, v0
lw v0, -0x7f0c(gp)
lui a1, 0x41
lui a2, 0x41
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, -0x57b4
jalr t9
addiu a2, a2, -0x5780
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.close(gp)
nop
jalr t9
move a0, s1
b 0x405f58
nop
addiu a0, zero, 0xc
mult s2, a0
lui v0, 0x5c50
lw t9, -sym.imp.malloc(gp)
ori v0, v0, 0xc3e7
mflo a0
sw v0, (s0)
sw s4, 0x10(s0)
sw zero, 4(s0)
sw zero, 0xc(s0)
jalr t9
sw s2, 8(s0)
lw gp, 0x10(sp)
bnez v0, 0x405ee0
sw v0, 0xc(s0)
lw v0, -0x7f0c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
lui a1, 0x41
lui a2, 0x41
addiu a1, a1, -0x57a0
jalr t9
addiu a2, a2, -0x5780
jal sym.susock_close
move a0, s0
b 0x405e54
nop
lw t9, -sym.imp.chmod(gp)
move a0, s3
jalr t9
addiu a1, zero, 0x1ff
lw gp, 0x10(sp)
move a1, s2
lw t9, -sym.imp.listen(gp)
nop
jalr t9
move a0, s1
[*] Function fprintf used 9 times ddnsd
