[*] Binary protection state of llmnresp
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function printf tear down of llmnresp
lw gp, 0x10(sp)
lui a0, 0x41
lw v0, 0x49a4(a0)
nop
beqz v0, 0x400e6c
nop
lw t9, -0x7f0c(gp)
nop
beqz t9, 0x400e6c
addiu a0, a0, 0x49a4
lw ra, 0x1c(sp)
jr t9
addiu sp, sp, 0x20
lw ra, 0x1c(sp)
nop
jr ra
addiu sp, sp, 0x20
nop
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0x3620
sw ra, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.printf(gp)
lui s0, 0x40
move s1, a0
lui a2, 0x40
lui a0, 0x40
addiu a2, a2, 0x3b2c
addiu a0, a0, 0x3b10
jalr t9
addiu a1, s0, 0x3b20
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.printf(gp)
addiu a1, s0, 0x3b20
jalr t9
addiu a0, a0, 0x3b30
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x3b48
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x3b78
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
--
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x3c6c
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.exit(gp)
nop
jalr t9
move a0, s1
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0x3620
sw ra, 0x24(sp)
sw gp, 0x10(sp)
lui v0, 0x41
lw v0, 0x4b30(v0)
sw a1, 0x2c(sp)
sw a2, 0x30(sp)
sw a3, 0x34(sp)
beqz v0, 0x400fcc
move a1, a0
lw v0, -0x7f50(gp)
lw t9, -sym.imp.vfprintf(gp)
addiu a2, sp, 0x2c
lw a0, (v0)
jalr t9
sw a2, 0x18(sp)
lw gp, 0x10(sp)
lw ra, 0x24(sp)
nop
jr ra
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x78
addiu gp, gp, -0x3620
sw ra, 0x74(sp)
sw s3, 0x70(sp)
sw s2, 0x6c(sp)
sw s1, 0x68(sp)
sw s0, 0x64(sp)
sw gp, 0x18(sp)
move s2, a0
lui a0, 0x40
--
beqz v0, 0x401690
addiu a0, zero, -1
sll v0, v1, 2
addu v0, s7, v0
lw v0, (v0)
nop
addu v0, v0, gp
jr v0
nop
b 0x401690
move a0, zero
lw v0, 0x4b30(s2)
nop
addiu v0, v0, 1
b 0x4016a0
sw v0, 0x4b30(s2)
lw v0, (s1)
b 0x4016a0
sw v0, 0x49d0(s3)
lw v0, (s1)
b 0x4016a0
sw v0, 0x49d4(s4)
slti v0, s0, 4
bnez v0, 0x401678
sll v0, s0, 2
lw t9, -sym.imp.printf(gp)
lw a2, (s1)
move a0, s5
jalr t9
addiu a1, zero, 4
b 0x401698
nop
lw v1, (s1)
addu v0, s6, v0
sw v1, (v0)
b 0x4016a0
addiu s0, s0, 1
addiu a0, zero, -1
jal 0x400e80
nop
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.getopt(gp)
lw a0, 0xd0(sp)
lw a1, 0xd4(sp)
jalr t9
[*] Function printf used 4 times llmnresp