[*] Binary protection state of logger
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function printf tear down of logger
nop
lw v0, (s0)
lw t9, -sym.imp.strcasecmp(gp)
move a0, s1
bnez v0, 0x4009ac
move a1, v0
addiu v0, zero, -1
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0x68b0
sw ra, 0x24(sp)
sw gp, 0x10(sp)
lui v0, 0x41
lw v0, 0x180c(v0)
sw a1, 0x2c(sp)
sw a2, 0x30(sp)
sw a3, 0x34(sp)
beqz v0, 0x400a48
move a1, a0
lw v0, -0x7fa0(gp)
lw t9, -sym.imp.vfprintf(gp)
addiu a2, sp, 0x2c
lw a0, (v0)
jalr t9
sw a2, 0x18(sp)
lw gp, 0x10(sp)
lw ra, 0x24(sp)
nop
jr ra
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x20
addiu gp, gp, -0x68b0
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
move s0, a0
lui a1, 0x40
lui a0, 0x40
addiu a0, a0, 0x1210
addiu a1, a1, 0x1228
--
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x1360
lui v0, 0x41
addiu s1, v0, 0x1648
lui v0, 0x40
lw gp, 0x10(sp)
addiu s5, v0, 0x1370
move s0, zero
addiu s3, zero, 5
b 0x400b84
addiu s4, zero, 4
bnez s3, 0x400b30
div zero, s0, s3
break 7
mfhi s2
bnez s2, 0x400b54
addiu s0, s0, 1
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 9
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.printf(gp)
lw a1, (s1)
jalr t9
move a0, s5
lw gp, 0x10(sp)
bne s2, s4, 0x400b84
addiu s1, s1, 8
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 0xa
lw gp, 0x10(sp)
lw v0, (s1)
nop
bnez v0, 0x400b24
nop
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 0xa
lui v0, 0x41
addiu s1, v0, 0x1700
lui v0, 0x40
lw gp, 0x10(sp)
addiu s5, v0, 0x1370
move s0, zero
addiu s3, zero, 5
b 0x400c28
addiu s4, zero, 4
bnez s3, 0x400bd4
div zero, s0, s3
break 7
mfhi s2
bnez s2, 0x400bf8
addiu s0, s0, 1
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 9
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.printf(gp)
lw a1, (s1)
jalr t9
move a0, s5
lw gp, 0x10(sp)
bne s2, s4, 0x400c28
addiu s1, s1, 8
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 0xa
lw gp, 0x10(sp)
lw v0, (s1)
nop
bnez v0, 0x400bc8
nop
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 0xa
lw gp, 0x10(sp)
--
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x1378
lui v0, 0x41
addiu s1, v0, 0x15e0
lui v0, 0x40
lw gp, 0x10(sp)
addiu s5, v0, 0x1388
move s0, zero
addiu s3, zero, 5
b 0x400ce4
addiu s4, zero, 4
bnez s3, 0x400c90
div zero, s0, s3
break 7
mfhi s2
bnez s2, 0x400cb4
addiu s0, s0, 1
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 9
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.printf(gp)
lw a1, (s1)
jalr t9
move a0, s5
lw gp, 0x10(sp)
bne s2, s4, 0x400ce4
addiu s1, s1, 8
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 0xa
lw gp, 0x10(sp)
lw v0, (s1)
nop
bnez v0, 0x400c84
nop
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 0xa
lw gp, 0x10(sp)
[*] Function printf used 4 times logger
