[*] Binary protection state of lld2d
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of lld2d
move a1, zero
b 0x404230
nop
lw a0, (a2)
nop
beqz a0, 0x4041a8
nop
lw t9, -sym.xfree(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
move a0, s1
lw gp, 0x10(sp)
nop
lw t9, -sym.xmalloc(gp)
nop
jalr t9
addiu a0, v0, 1
lw gp, 0x10(sp)
sw v0, (s0)
lw t9, -sym.imp.strcpy(gp)
move a1, s1
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
move a0, v0
jr t9
addiu sp, sp, 0x28
lw t9, -sym.imp.strtoul(gp)
move a1, zero
jalr t9
move a2, zero
lw gp, 0x10(sp)
b 0x404248
sb v0, (s0)
lw t9, -sym.imp.strtoul(gp)
move a1, zero
jalr t9
move a2, zero
lw gp, 0x10(sp)
b 0x404248
--
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, 0x6c70
sw ra, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
move s2, a0
lw gp, 0x10(sp)
nop
lw t9, -sym.xmalloc(gp)
nop
jalr t9
addiu a0, v0, 6
lb v1, (s2)
move s0, v0
move s1, v0
addiu v0, zero, 0x2f
lw gp, 0x10(sp)
beq v1, v0, 0x4042d8
lui a1, 0x41
lw t9, -sym.imp.strcpy(gp)
addiu a1, a1, -0x29fc
jalr t9
move a0, s0
lw gp, 0x10(sp)
addiu s1, s0, 5
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
move a0, s2
lw gp, 0x10(sp)
move a0, s1
lw t9, -sym.imp.strncpy(gp)
move a1, s2
jalr t9
move a2, v0
lw ra, 0x24(sp)
move v0, s0
lw gp, 0x10(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
--
sw zero, (v0)
lw v0, -obj.g_net_flags(gp)
sw zero, 8(v1)
sw zero, (v0)
lw v0, -obj.g_max_op_rate(gp)
nop
sh zero, (v0)
lw v0, -obj.g_link_speed(gp)
nop
sw zero, (v0)
lw v0, -obj.g_qos_flags(gp)
nop
sw zero, (v0)
lw v0, -obj.g_wl_physical_medium(gp)
jalr t9
sb zero, (v0)
lw gp, 0x10(sp)
nop
lw t9, -sym.xmalloc(gp)
nop
jalr t9
addiu a0, v0, 1
lw gp, 0x10(sp)
move a0, v0
lw v1, -obj.g_icon_path(gp)
lw t9, -sym.imp.strcpy(gp)
sw v0, (v1)
jalr t9
move a1, s0
lw gp, 0x10(sp)
bnez s5, 0x404854
move a0, s5
lui v0, 0x41
addiu a0, v0, -0x2948
lw t9, -sym.imp.fopen(gp)
lui a1, 0x41
jalr t9
addiu a1, a1, -0x3088
lw gp, 0x10(sp)
bnez v0, 0x404bac
move s2, v0
b 0x404c38
nop
lw t9, -sym.lxmldbc_eatwhite(gp)
nop
jalr t9
[*] Function strcpy used 3 times lld2d
