[*] Binary protection state of rdisc6
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of rdisc6
addiu a2, zero, 0x20
lw gp, 0x20(sp)
lw v0, 0x8c8(sp)
lw t9, -sym.imp.getaddrinfo(gp)
andi v1, v0, 4
addiu v0, zero, 0xa
move a0, s3
sw v0, 0x124(sp)
sw s2, 0x128(sp)
sw v1, 0x120(sp)
move a2, s0
move a1, zero
jalr t9
addiu a3, sp, 0x34
lw gp, 0x20(sp)
beqz v0, 0x402cec
move a0, v0
lw t9, -sym.imp.gai_strerror(gp)
lw v0, -0x7f40(gp)
nop
lw s0, (v0)
jalr t9
nop
lw gp, 0x20(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s0
addiu a1, a1, 0x4e9c
move a2, s3
jalr t9
move a3, v0
b 0x402d50
nop
lw v0, 0x34(sp)
lw t9, -sym.imp.memcpy(gp)
lw a1, 0x14(v0)
addiu a2, zero, 0x1c
jalr t9
addiu a0, sp, 0x90
lw gp, 0x20(sp)
lw a0, 0x34(sp)
lw t9, -sym.imp.freeaddrinfo(gp)
nop
jalr t9
nop
lw gp, 0x20(sp)
--
bne v0, a1, 0x404238
move v1, v0
lw a3, -0x7f68(gp)
lw v1, -obj.gverbose(gp)
lw a2, (a3)
sltu v0, zero, s3
slt a0, a2, s5
beqz a0, 0x4045e4
sb v0, (v1)
addiu a1, a2, 1
sll v0, a2, 2
addu v0, s0, v0
slt v1, a1, s5
lw s4, (v0)
beqz v1, 0x40460c
sw a1, (a3)
sll v0, a1, 2
addu v0, s0, v0
lw s1, (v0)
addiu v0, a2, 2
beqz s1, 0x40460c
sw v0, (a3)
beq v0, s5, 0x404618
nop
lw v0, -0x7f40(gp)
lw t9, -sym.imp.fprintf(gp)
lw a2, (s0)
lw a0, (v0)
lui a1, 0x40
jalr t9
addiu a1, a1, 0x5628
lw gp, 0x18(sp)
b 0x4046ac
addiu v0, zero, 2
lui v0, 0x40
move s1, s4
addiu s4, v0, 0x58f8
lw t9, -sym.imp.getpid(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
lui v1, 0x41
lw t9, -sym.imp.fopen(gp)
lw a0, 0x6100(v1)
lui a1, 0x40
addiu a1, a1, 0x5900
jalr t9
move s2, v0
lw gp, 0x18(sp)
beqz v0, 0x404684
move s0, v0
lw t9, -sym.imp.fprintf(gp)
lui a1, 0x40
addiu a1, a1, 0x5904
move a2, s2
jalr t9
move a0, v0
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.fclose(gp)
nop
jalr t9
move a0, s0
lw v0, 0x38(sp)
move a0, s4
sw v0, (fp)
move a1, s1
move a2, s3
move a3, s6
jal 0x402a48
sw s7, 0x10(sp)
lw gp, 0x18(sp)
[*] Function fprintf used 3 times rdisc6
