[*] Binary protection state of xmldb
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function popen tear down of xmldb
addiu a1, zero, 0xa
jr t9
addiu sp, sp, 0x30
lui gp, 0x44
addiu sp, sp, -0x430
addiu gp, gp, -0x4690
sw ra, 0x42c(sp)
sw s2, 0x428(sp)
sw s1, 0x424(sp)
sw s0, 0x420(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.vsnprintf(gp)
addiu v0, sp, 0x438
addiu s0, sp, 0x1c
sw a2, 0x438(sp)
sw a3, 0x43c(sp)
move a2, a1
move a3, v0
addiu a1, zero, 0x400
move s1, a0
sw v0, 0x18(sp)
jalr t9
move a0, s0
lw gp, 0x10(sp)
lui a1, 0x42
lw t9, -sym.imp.popen(gp)
move a0, s0
jalr t9
addiu a1, a1, 0x2c14
move s0, v0
lw gp, 0x10(sp)
bnez s0, 0x404c88
addiu v0, zero, -1
b 0x404d18
nop
jalr t9
nop
lw gp, 0x10(sp)
b 0x404c8c
nop
addiu s2, zero, -1
lw t9, -sym.imp.fgetc(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
--
jr ra
addiu sp, sp, 0x428
lui gp, 0x44
addiu sp, sp, -0x438
addiu gp, gp, -0x4690
sw ra, 0x434(sp)
sw s4, 0x430(sp)
sw s3, 0x42c(sp)
sw s2, 0x428(sp)
sw s1, 0x424(sp)
sw s0, 0x420(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.vsnprintf(gp)
addiu v0, sp, 0x444
addiu s0, sp, 0x1c
sw a3, 0x444(sp)
move s2, a0
move a3, v0
move a0, s0
move s3, a1
sw v0, 0x18(sp)
jalr t9
addiu a1, zero, 0x400
lw gp, 0x10(sp)
lui a1, 0x42
lw t9, -sym.imp.popen(gp)
move a0, s0
jalr t9
addiu a1, a1, 0x2c14
lw gp, 0x10(sp)
beqz v0, 0x41d62c
move s1, v0
addiu s3, s3, -1
move s0, zero
b 0x41d5cc
addiu s4, zero, -1
jalr t9
nop
lw gp, 0x10(sp)
beq v0, s4, 0x41d5dc
addu v1, s2, s0
sb v0, (v1)
addiu s0, s0, 1
slt v0, s0, s3
lw t9, -sym.imp.fgetc(gp)
bnez v0, 0x41d5b0
[*] Function popen used 2 times xmldb