[*] Binary protection state of igmpproxy
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function printf tear down of igmpproxy
lw v0, -0x4b10(a0)
nop
beqz v0, 0x40182c
nop
lw t9, -0x7e44(gp)
nop
beqz t9, 0x40182c
addiu a0, a0, -0x4b10
lw ra, 0x1c(sp)
jr t9
addiu sp, sp, 0x20
lw ra, 0x1c(sp)
nop
jr ra
addiu sp, sp, 0x20
nop
jr ra
move v0, zero
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, 0x35d0
sw ra, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.printf(gp)
lui s0, 0x41
move s1, a0
lui a2, 0x41
lui a0, 0x41
addiu a2, a2, -0x5974
addiu a0, a0, -0x5990
jalr t9
addiu a1, s0, -0x5980
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
addiu a1, s0, -0x5980
jalr t9
addiu a0, a0, -0x5968
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, -0x5950
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, -0x5920
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
nop
jalr t9
--
addiu gp, gp, 0x35d0
sw ra, 0x1c(sp)
sw gp, 0x10(sp)
lw t9, -sym.igmpproxy_stop(gp)
move a0, zero
jalr t9
move a1, zero
lw ra, 0x1c(sp)
lw gp, 0x10(sp)
move v0, zero
jr ra
addiu sp, sp, 0x20
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, 0x35d0
sw ra, 0x24(sp)
sw gp, 0x10(sp)
lui v0, 0x42
lw v0, -0x47ec(v0)
sw a1, 0x2c(sp)
sw a2, 0x30(sp)
sw a3, 0x34(sp)
beqz v0, 0x401cbc
move a1, a0
lw v0, -0x7ed0(gp)
lw t9, -sym.imp.vfprintf(gp)
addiu a2, sp, 0x2c
lw a0, (v0)
jalr t9
sw a2, 0x18(sp)
lw gp, 0x10(sp)
lw ra, 0x24(sp)
nop
jr ra
addiu sp, sp, 0x28
nop
lui gp, 0x42
addiu sp, sp, -0xa0
addiu gp, gp, 0x35d0
sw ra, 0x9c(sp)
sw s0, 0x98(sp)
sw gp, 0x10(sp)
lui s0, 0x42
lw a0, -0x47e0(s0)
nop
beqz a0, 0x401d14
nop
lw t9, -sym.sloop_cancel_read_sock(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
sw zero, -0x47e0(s0)
lw v0, -obj.o_helperscript(gp)
nop
lw a3, (v0)
nop
beqz a3, 0x401d68
addiu s0, sp, 0x18
lw t9, -sym.imp.snprintf(gp)
lui a2, 0x41
addiu a2, a2, -0x584c
move a0, s0
jalr t9
addiu a1, zero, 0x7f
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
nop
lw v0, -obj.o_helperscript(gp)
lw t9, -sym.mrt_deinit(gp)
nop
jalr t9
sw zero, (v0)
lw gp, 0x10(sp)
nop
--
move a0, v0
lw t9, -sym.sopt_set_hdrincl(gp)
nop
jalr t9
addiu a1, zero, 1
lw gp, 0x10(sp)
nop
lw t9, -sym.mrtapi_sock(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
move a0, v0
lw t9, -sym.sopt_set_multicast_loop(gp)
nop
jalr t9
move a1, zero
lw gp, 0x10(sp)
nop
lw v0, -obj.o_helperscript(gp)
nop
lw a3, (v0)
nop
beqz a3, 0x40226c
addiu s0, sp, 0x38
lw t9, -sym.imp.snprintf(gp)
lui a2, 0x41
addiu a2, a2, -0x584c
move a0, s0
jalr t9
addiu a1, zero, 0x7f
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
nop
lw t9, -sym.mrtapi_sock(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.sloop_register_read_sock(gp)
--
b 0x403378
addiu s3, sp, 0x38
lw a0, 0x10(s0)
jalr t9
nop
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
move a0, s4
lw gp, 0x10(sp)
lw a0, 0x14(s0)
lw t9, -sym.imp.inet_ntoa(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
move a0, s3
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
move a2, s0
move a1, s2
jalr t9
addiu a0, a0, -0x5610
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
addiu a0, a0, -0x55f8
jalr t9
move a1, s4
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
addiu a0, a0, -0x55e8
jalr t9
move a1, s3
lw gp, 0x10(sp)
lbu a1, (s1)
lw t9, -sym.imp.printf(gp)
lui a0, 0x41
jalr t9
addiu a0, a0, -0x55d8
lw gp, 0x10(sp)
lw a1, 4(s1)
lw t9, -sym.imp.printf(gp)
lui a0, 0x41
jalr t9
addiu a0, a0, -0x55c4
lw gp, 0x10(sp)
lw a1, 0xc(s1)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
move a0, fp
lw gp, 0x10(sp)
lw a1, 0x10(s1)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
move a0, s7
lw gp, 0x10(sp)
addiu a0, zero, 0xa
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu s2, s2, 1
lw gp, 0x10(sp)
addiu s1, s1, 0x2c
mult s2, s5
lui v1, 0x42
mflo v0
addiu v1, v1, -0x47d0
addu s0, v0, v1
lw v0, -0x4670(s6)
lw t9, -sym.imp.inet_ntoa(gp)
slt v0, s2, v0
bnez v0, 0x403258
--
lui v0, 0x41
slti v0, a0, 0x17
beqz v0, 0x404010
addiu v0, zero, 0x17
addiu v0, zero, 0x11
beq a0, v0, 0x40402c
lui v0, 0x41
addiu v0, zero, 0x12
bne a0, v0, 0x404044
lui v0, 0x41
b 0x404068
addiu v0, v0, -0x5498
beq a0, v0, 0x40403c
lui v0, 0x41
addiu v0, zero, 0x22
bne a0, v0, 0x404044
lui v0, 0x41
b 0x404068
addiu v0, v0, -0x544c
b 0x404068
addiu v0, v0, -0x5484
b 0x404068
addiu v0, v0, -0x5470
b 0x404068
addiu v0, v0, -0x545c
lw t9, -sym.imp.sprintf(gp)
lui s0, 0x42
lui a1, 0x41
move a2, a0
addiu a1, a1, -0x5438
jalr t9
addiu a0, s0, -0x4660
lw gp, 0x10(sp)
addiu v0, s0, -0x4660
lw ra, 0x1c(sp)
lw s0, 0x18(sp)
jr ra
addiu sp, sp, 0x20
lui gp, 0x42
addiu sp, sp, -0x2d0
addiu gp, gp, 0x35d0
sw ra, 0x2cc(sp)
sw s7, 0x2c8(sp)
sw s6, 0x2c4(sp)
sw s5, 0x2c0(sp)
sw s4, 0x2bc(sp)
--
sw s4, 0x28(sp)
sw s3, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.puts(gp)
lui a0, 0x41
jalr t9
addiu a0, a0, -0x53b0
lui v0, 0x41
lui s5, 0x42
addiu fp, v0, -0x5340
lui v0, 0x41
lw gp, 0x10(sp)
addiu s7, v0, -0x5330
move s2, zero
b 0x4046cc
addiu s6, s5, -0x4640
lw t9, -sym.imp.inet_ntoa(gp)
lw a0, 8(s2)
jalr t9
addiu s4, s2, 0x14
lw gp, 0x10(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
move a1, v0
jalr t9
addiu a0, a0, -0x5370
lw gp, 0x10(sp)
b 0x404628
move s1, zero
lw t9, -sym.vifs_get_name(gp)
lhu a0, 0x14(s1)
jalr t9
addiu s3, s1, 8
lw gp, 0x10(sp)
lhu a2, 0x14(s1)
lw t9, -sym.imp.printf(gp)
lw a3, 0x18(s1)
lui a0, 0x41
move a1, v0
jalr t9
addiu a0, a0, -0x5364
lw gp, 0x10(sp)
b 0x4045fc
move s0, zero
lw t9, -sym.imp.inet_ntoa(gp)
lw a0, 0xc(s0)
jalr t9
nop
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.printf(gp)
nop
jalr t9
move a0, fp
lw gp, 0x10(sp)
beqz s0, 0x404610
nop
lw s0, (s0)
b 0x404618
nop
lw s0, 8(s1)
nop
beq s0, s3, 0x404628
nop
bnez s0, 0x4045d0
nop
beqz s1, 0x40463c
nop
lw s1, (s1)
b 0x404644
nop
lw s1, 0x14(s2)
nop
beq s1, s4, 0x404654
addiu s3, s2, 0xc
bnez s1, 0x404594
nop
b 0x4046a0
move s1, zero
lw t9, -sym.imp.inet_ntoa(gp)
lw a0, 8(s1)
jalr t9
nop
lw gp, 0x10(sp)
lhu a0, 0xc(s1)
lw t9, -sym.vifs_get_name(gp)
nop
jalr t9
move s0, v0
lw gp, 0x10(sp)
move a1, s0
lw t9, -sym.imp.printf(gp)
move a2, v0
jalr t9
move a0, s7
lw gp, 0x10(sp)
beqz s1, 0x4046b4
nop
lw s1, (s1)
b 0x4046bc
nop
lw s1, 0xc(s2)
nop
beq s1, s3, 0x4046cc
nop
bnez s1, 0x40465c
nop
beqz s2, 0x4046e0
nop
lw s2, (s2)
b 0x4046e8
nop
--
srl v0, a0, 0x18
sll s0, a0, 0x18
srl v1, a0, 8
andi v1, v1, 0xff00
or s0, s0, v0
andi v0, a0, 0xff00
or s0, s0, v1
sll v0, v0, 8
lw t9, -sym.vifs_get_name(gp)
lhu a0, 0x14(a1)
or s0, s0, v0
lui v0, 0x7f
ori v0, v0, 0xffff
jalr t9
and s0, s0, v0
lbu a2, 0x11(s2)
lw gp, 0x50(sp)
lbu a1, 0x10(s2)
lbu a3, 0x12(s2)
lbu t0, 0x13(s2)
lbu t1, 0x14(s2)
lbu t2, 0x15(s2)
srl v1, s0, 8
sw v0, 0x14(sp)
addiu v0, zero, 1
lw t9, -sym.imp.snprintf(gp)
andi v1, v1, 0xff
andi a0, s0, 0xff
addiu s1, sp, 0x98
sw v0, 0x1c(sp)
sw a2, 0x38(sp)
addiu v0, zero, 0x5e
srl s0, s0, 0x10
lui a2, 0x41
sw v1, 0x2c(sp)
sw a0, 0x30(sp)
sw a1, 0x34(sp)
sw a3, 0x3c(sp)
sw t0, 0x40(sp)
sw t1, 0x44(sp)
sw t2, 0x48(sp)
addiu a2, a2, -0x52d8
move a3, s3
move a0, s1
addiu a1, zero, 0x7f
sw s5, 0x10(sp)
--
sw ra, 0xb4(sp)
sw s3, 0xb0(sp)
sw s2, 0xac(sp)
sw s1, 0xa8(sp)
sw s0, 0xa4(sp)
sw gp, 0x18(sp)
lw v0, -obj.o_helperscript(gp)
nop
lw s2, (v0)
nop
beqz s2, 0x4049ac
move s3, a0
lw v0, 0x10(a0)
lw t9, -sym.imp.inet_ntoa(gp)
lw a0, 8(v0)
jalr t9
addiu s1, sp, 0x20
lw gp, 0x18(sp)
lhu a0, 0x14(s3)
lw t9, -sym.vifs_get_name(gp)
nop
jalr t9
move s0, v0
lw gp, 0x18(sp)
lui a2, 0x41
lw t9, -sym.imp.snprintf(gp)
addiu a2, a2, -0x5278
move a3, s2
move a0, s1
addiu a1, zero, 0x7f
sw s0, 0x10(sp)
jalr t9
sw v0, 0x14(sp)
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s1
lw gp, 0x18(sp)
b 0x4049d8
addiu s0, s3, 8
lw v1, 4(a1)
lw v0, (a1)
nop
sw v0, (v1)
--
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
move a0, s0
lw gp, 0x18(sp)
addiu v1, sp, 0x20
lw t9, -sym.imp.sendto(gp)
sw v1, 0x10(sp)
addiu v1, zero, 0x10
move a1, s0
sw v1, 0x14(sp)
move a2, v0
move a3, zero
jalr t9
move a0, s1
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.close(gp)
nop
jalr t9
move a0, s1
lw gp, 0x18(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
addiu a0, a0, -0x51c0
jalr t9
move a1, s2
lw ra, 0x4c(sp)
lw gp, 0x18(sp)
lw s2, 0x48(sp)
lw s1, 0x44(sp)
lw s0, 0x40(sp)
jr ra
addiu sp, sp, 0x50
lui gp, 0x42
addiu sp, sp, -0x1a0
addiu gp, gp, 0x35d0
sw ra, 0x19c(sp)
sw fp, 0x198(sp)
sw s7, 0x194(sp)
sw s6, 0x190(sp)
sw s5, 0x18c(sp)
sw s4, 0x188(sp)
sw s3, 0x184(sp)
--
addiu v1, s3, 8
lw v0, -obj.o_helperscript(gp)
sw v1, 0xc(s3)
lw s4, (v0)
lw v0, 0x18(s2)
sw v1, 8(s3)
sw s0, (s3)
sw s3, 0x18(s2)
sw s3, (v0)
sw s2, 0x10(s3)
sh s5, 0x14(s3)
beqz s4, 0x406234
sw v0, 4(s3)
lw t9, -sym.imp.inet_ntoa(gp)
lw a0, 8(s2)
jalr t9
addiu s1, sp, 0xd8
lw gp, 0x50(sp)
move a0, s5
lw t9, -sym.vifs_get_name(gp)
nop
jalr t9
move s0, v0
lw gp, 0x50(sp)
lui a2, 0x41
lw t9, -sym.imp.snprintf(gp)
addiu a2, a2, -0x5108
move a3, s4
move a0, s1
addiu a1, zero, 0x7f
sw s0, 0x10(sp)
jalr t9
sw v0, 0x14(sp)
lw gp, 0x50(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s1
jal 0x4050a4
move a0, s2
lw gp, 0x50(sp)
nop
lw t9, -sym.imp.inet_ntoa(gp)
nop
jalr t9
--
sll v1, v1, 8
lw t9, -sym.imp.inet_ntoa(gp)
or s0, s0, v0
lw a0, 8(a0)
lui v0, 0x7f
or s0, s0, v1
ori v0, v0, 0xffff
jalr t9
and s0, s0, v0
lw gp, 0x50(sp)
lhu a0, 0x14(s3)
lw t9, -sym.vifs_get_name(gp)
nop
jalr t9
move s1, v0
lbu a2, 0x11(s2)
lw gp, 0x50(sp)
lbu a1, 0x10(s2)
lbu a3, 0x12(s2)
lbu t2, 0x15(s2)
lbu t0, 0x13(s2)
lbu t1, 0x14(s2)
srl v1, s0, 8
sw v0, 0x14(sp)
addiu v0, zero, 1
lw t9, -sym.imp.snprintf(gp)
andi a0, s0, 0xff
andi v1, v1, 0xff
addiu s2, sp, 0x158
sw v0, 0x1c(sp)
sw a2, 0x38(sp)
addiu v0, zero, 0x5e
srl s0, s0, 0x10
lui a2, 0x41
sw a0, 0x30(sp)
sw a1, 0x34(sp)
sw a3, 0x3c(sp)
move a0, s2
sw s1, 0x10(sp)
sw s5, 0x18(sp)
sw v0, 0x24(sp)
sw s0, 0x28(sp)
sw v1, 0x2c(sp)
sw t0, 0x40(sp)
sw t1, 0x44(sp)
sw t2, 0x48(sp)
--
addiu gp, gp, 0x35d0
sw ra, 0xd4(sp)
sw fp, 0xd0(sp)
sw s7, 0xcc(sp)
sw s6, 0xc8(sp)
sw s5, 0xc4(sp)
sw s4, 0xc0(sp)
sw s3, 0xbc(sp)
sw s2, 0xb8(sp)
sw s1, 0xb4(sp)
sw s0, 0xb0(sp)
sw gp, 0x28(sp)
lw t9, -sym.imp.puts(gp)
lui a0, 0x41
lui v0, 0x42
lw s4, -0x4630(v0)
jalr t9
addiu a0, a0, -0x5000
lui v0, 0x41
addiu fp, v0, -0x4fc4
lui v0, 0x41
lw gp, 0x28(sp)
addiu s7, v0, -0x4fc8
b 0x406670
lui s6, 0xff
lw t9, -sym.imp.printf(gp)
lbu a1, (s4)
lbu a2, 1(s4)
lbu a3, 2(s4)
lui a0, 0x41
jalr t9
addiu a0, a0, -0x4fe8
lbu v0, 3(s4)
lw gp, 0x28(sp)
andi v0, v0, 1
beqz v0, 0x406594
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
addiu a0, a0, -0x4fcc
jalr t9
move a1, zero
lw gp, 0x28(sp)
nop
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu a0, zero, 0xa
lw gp, 0x28(sp)
lw s3, 4(s4)
b 0x406650
nop
lw a0, (s3)
lbu s0, 4(s3)
srl a1, a0, 0x18
sll v1, a0, 0x18
and v0, a0, s6
or v1, v1, a1
srl v0, v0, 8
andi a0, a0, 0xff00
or v1, v1, v0
sll a0, a0, 8
lbu s1, (s4)
lbu s2, 1(s4)
lbu s5, 2(s4)
jalr t9
or a0, v1, a0
sll a2, s0, 7
lw gp, 0x28(sp)
lb v1, 6(s3)
andi a2, a2, 0xff
srl s0, s0, 1
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
or a2, a2, s1
ori a1, s0, 0xe0
move a3, s2
addiu a0, a0, -0x4fb8
lbu t1, 4(s3)
lb t2, 5(s3)
beqz v1, 0x406630
move t0, s7
move t0, fp
sw s5, 0x10(sp)
sw v0, 0x14(sp)
sw t1, 0x18(sp)
sw t2, 0x1c(sp)
jalr t9
sw t0, 0x20(sp)
lw gp, 0x28(sp)
lw s3, 8(s3)
lw t9, -sym.imp.inet_ntoa(gp)
bnez s3, 0x4065b4
nop
--
addiu s4, v0, -0x4f98
lui v0, 0x42
addiu s3, v0, -0x2624
lw gp, 0x28(sp)
addiu s0, v1, -0x4624
lw v0, -0x4624(v1)
addiu s2, zero, -1
b 0x4066f4
addiu s1, sp, 0x30
lbu v0, 6(s0)
lw a2, (s0)
lhu a3, 4(s0)
jalr t9
sw v0, 0x10(sp)
lw gp, 0x28(sp)
nop
lw t9, -sym.imp.puts(gp)
nop
jalr t9
move a0, s1
lw v0, 8(s0)
addiu s0, s0, 8
lw gp, 0x28(sp)
beq s0, s3, 0x406704
nop
lw t9, -sym.imp.sprintf(gp)
move a0, s1
bne v0, s2, 0x4066b4
move a1, s4
lw ra, 0xd4(sp)
lw fp, 0xd0(sp)
lw s7, 0xcc(sp)
lw s6, 0xc8(sp)
lw s5, 0xc4(sp)
lw s4, 0xc0(sp)
lw s3, 0xbc(sp)
lw s2, 0xb8(sp)
lw s1, 0xb4(sp)
lw s0, 0xb0(sp)
jr ra
addiu sp, sp, 0xd8
lui gp, 0x42
addiu sp, sp, -0x20
addiu gp, gp, 0x35d0
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
--
bnez v0, 0x40698c
addiu a0, zero, 0x3e8
jalr t9
nop
lw gp, 0x10(sp)
bne s0, s1, 0x406954
addiu a0, zero, 0x34
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 0x42
addiu sp, sp, -0x58
addiu gp, gp, 0x35d0
sw ra, 0x54(sp)
sw s3, 0x50(sp)
sw s2, 0x4c(sp)
sw s1, 0x48(sp)
sw s0, 0x44(sp)
sw gp, 0x18(sp)
lbu v1, 2(a0)
lbu v0, 1(a0)
lbu a3, (a0)
lw t9, -sym.imp.sprintf(gp)
addiu s1, sp, 0x2c
lui a2, 0x41
move s3, a1
lui a1, 0x41
sw v1, 0x14(sp)
move s2, a0
addiu a2, a2, -0x4f4c
addiu a1, a1, -0x4f5c
move a0, s1
jalr t9
sw v0, 0x10(sp)
lw gp, 0x18(sp)
addiu s0, sp, 0x20
lw t9, -sym.imp.strncpy(gp)
move a1, s1
move a0, s0
jalr t9
addiu a2, zero, 8
lw gp, 0x18(sp)
addiu a2, zero, 0x10
--
sw s0, 0x24(sp)
sw gp, 0x18(sp)
lw t9, -sym.imp.open(gp)
move s5, a0
lui a0, 0x41
move s1, a1
addiu a0, a0, -0x4cf4
addiu a1, zero, 0x12
jalr t9
move s4, a2
lw gp, 0x18(sp)
bgez v0, 0x407eb0
move s3, v0
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
addiu a0, a0, -0x4ce8
jalr t9
move a1, v0
b 0x407f48
nop
srl v0, s1, 0xc
lw t9, -sym.imp.mmap(gp)
sll s0, v0, 0xc
sw s3, 0x10(sp)
sw s0, 0x14(sp)
move a0, zero
addiu a1, zero, 0x1000
addiu a2, zero, 3
jalr t9
addiu a3, zero, 1
move s2, v0
addiu v0, zero, -1
lw gp, 0x18(sp)
bne s2, v0, 0x407f60
subu v0, s1, s0
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
lui a0, 0x41
lw t9, -sym.imp.printf(gp)
addiu a0, a0, -0x4cc8
move a1, s0
jalr t9
move a2, v0
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.close(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.exit(gp)
nop
jalr t9
addiu a0, zero, -1
addu s1, s2, v0
addu s0, v0, s0
lw t9, -sym.verbose(gp)
lw a2, (s1)
--
sw gp, 0x18(sp)
lw t9, -sym.imp.puts(gp)
lui a0, 0x41
jalr t9
addiu a0, a0, -0x4c6c
lw gp, 0x18(sp)
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, -0x4c48
lui v0, 0x42
lw s0, -0xa38(v0)
addiu s2, v0, -0xa38
lui v0, 0x41
lw gp, 0x18(sp)
b 0x4083e8
addiu s1, v0, -0x4c38
lw v0, 0x14(s0)
lw a2, 0xc(s0)
lw a3, 0x10(s0)
jalr t9
sw v0, 0x10(sp)
lw gp, 0x18(sp)
lw s0, (s0)
lw t9, -sym.imp.printf(gp)
move a1, s0
bne s0, s2, 0x4083cc
move a0, s1
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
addiu a0, a0, -0x4c04
jr t9
addiu sp, sp, 0x30
lui gp, 0x42
addiu sp, sp, -0x30
addiu gp, gp, 0x35d0
sw ra, 0x2c(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
--
lui a0, 0x41
jalr t9
addiu a0, a0, -0x4c6c
lw gp, 0x18(sp)
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, -0x4be0
lui v0, 0x42
lw s0, -0xa30(v0)
addiu s2, v0, -0xa30
lui v0, 0x41
lw gp, 0x18(sp)
b 0x4084a4
addiu s1, v0, -0x4bd0
lw v0, 0x14(s0)
lw a2, 0xc(s0)
lw a3, 0x10(s0)
sw v0, 0x10(sp)
lw v0, 0x18(s0)
jalr t9
sw v0, 0x14(sp)
lw gp, 0x18(sp)
lw s0, (s0)
lw t9, -sym.imp.printf(gp)
move a1, s0
bne s0, s2, 0x408480
move a0, s1
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
addiu a0, a0, -0x4c04
jr t9
addiu sp, sp, 0x30
lui gp, 0x42
addiu sp, sp, -0x30
addiu gp, gp, 0x35d0
sw ra, 0x2c(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
lw t9, -sym.imp.puts(gp)
lui a0, 0x41
jalr t9
addiu a0, a0, -0x4c6c
lw gp, 0x18(sp)
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, -0x4b98
lui v0, 0x42
lw s0, -0xa40(v0)
addiu s2, v0, -0xa40
lui v0, 0x41
lw gp, 0x18(sp)
b 0x408558
addiu s1, v0, -0x4b88
lw v0, 0x14(s0)
lw a2, 0xc(s0)
lw a3, 0x10(s0)
jalr t9
sw v0, 0x10(sp)
lw gp, 0x18(sp)
lw s0, (s0)
lw t9, -sym.imp.printf(gp)
move a1, s0
bne s0, s2, 0x40853c
move a0, s1
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
addiu a0, a0, -0x4c04
jr t9
addiu sp, sp, 0x30
lui gp, 0x42
addiu sp, sp, -0x30
addiu gp, gp, 0x35d0
sw ra, 0x2c(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
lw t9, -sym.imp.puts(gp)
lui a0, 0x41
jalr t9
addiu a0, a0, -0x4c6c
lw gp, 0x18(sp)
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, -0x4b54
lui v0, 0x42
lw s0, -0xa48(v0)
addiu s2, v0, -0xa48
lui v0, 0x41
lw gp, 0x18(sp)
b 0x40860c
addiu s1, v0, -0x4b88
lw v0, 0x14(s0)
lw a2, 0xc(s0)
lw a3, 0x10(s0)
jalr t9
sw v0, 0x10(sp)
lw gp, 0x18(sp)
lw s0, (s0)
lw t9, -sym.imp.printf(gp)
move a1, s0
bne s0, s2, 0x4085f0
move a0, s1
lui a0, 0x41
lw t9, -sym.imp.puts(gp)
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
addiu a0, a0, -0x4c04
jr t9
addiu sp, sp, 0x30
addiu sp, sp, -0x20
sw ra, 0x1c(sp)
sw gp, 0x10(sp)
jal 0x40858c
nop
jal 0x4084d8
nop
jal 0x40841c
--
addiu gp, gp, 0x35d0
sw ra, 0x94(sp)
sw s1, 0x90(sp)
sw s0, 0x8c(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.socket(gp)
move s1, a0
addiu a1, zero, 2
addiu a0, zero, 1
jalr t9
move a2, zero
lw gp, 0x10(sp)
bgez v0, 0x4093c4
move s0, v0
b 0x409448
addiu s0, zero, -1
lw t9, -sym.imp.fcntl(gp)
move a0, v0
addiu a1, zero, 2
jalr t9
addiu a2, zero, 1
lw gp, 0x10(sp)
bnez s1, 0x4093e8
lui v0, 0x41
addiu s1, v0, -0x4b44
lw t9, -sym.imp.snprintf(gp)
addiu v0, zero, 1
lui a2, 0x41
addiu a2, a2, -0x4b30
move a3, s1
addiu a0, sp, 0x1a
addiu a1, zero, 0x6c
jalr t9
sh v0, 0x18(sp)
lw gp, 0x10(sp)
move a0, s0
lw t9, -sym.imp.connect(gp)
addiu a1, sp, 0x18
jalr t9
addiu a2, zero, 0x6e
lw gp, 0x10(sp)
bgez v0, 0x409448
nop
lw t9, -sym.imp.close(gp)
nop
jalr t9
--
jalr t9
move s0, a1
addiu v0, v0, 1
move a0, s1
move a2, s0
move a3, s2
addiu a1, zero, 0xc
jal 0x4094fc
sw v0, 0x10(sp)
lw ra, 0x2c(sp)
lw gp, 0x18(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 0x42
addiu sp, sp, -0x230
addiu gp, gp, 0x35d0
sw ra, 0x22c(sp)
sw s2, 0x228(sp)
sw s1, 0x224(sp)
sw s0, 0x220(sp)
sw gp, 0x18(sp)
addiu s0, sp, 0x20
lw t9, -sym.imp.snprintf(gp)
move v0, a2
lui a2, 0x41
sw a3, 0x10(sp)
addiu a2, a2, -0x4b2c
move a3, v0
move s1, a0
move s2, a1
move a0, s0
jalr t9
addiu a1, zero, 0x1ff
lw gp, 0x18(sp)
move a0, s0
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
sb zero, 0x21f(sp)
addiu v0, v0, 1
move a0, s1
move a2, s2
move a3, s0
addiu a1, zero, 0xb
jal 0x4094fc
sw v0, 0x10(sp)
lw ra, 0x22c(sp)
lw gp, 0x18(sp)
lw s2, 0x228(sp)
lw s1, 0x224(sp)
lw s0, 0x220(sp)
jr ra
addiu sp, sp, 0x230
lui gp, 0x42
addiu sp, sp, -0x230
addiu gp, gp, 0x35d0
sw ra, 0x22c(sp)
sw s2, 0x228(sp)
sw s1, 0x224(sp)
sw s0, 0x220(sp)
sw gp, 0x18(sp)
addiu s0, sp, 0x20
lw t9, -sym.imp.snprintf(gp)
move v0, a2
lui a2, 0x41
sw a3, 0x10(sp)
addiu a2, a2, -0x4b2c
move a3, v0
move s1, a0
move s2, a1
move a0, s0
jalr t9
addiu a1, zero, 0x1ff
lw gp, 0x18(sp)
move a0, s0
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
sb zero, 0x21f(sp)
addiu v0, v0, 1
move a0, s1
move a2, s2
move a3, s0
--
move s3, a3
addiu v0, v0, 1
move a0, s1
move a2, s0
move a3, s2
addiu a1, zero, 1
sw s3, 0x14(sp)
jal 0x409df4
sw v0, 0x10(sp)
lw ra, 0x34(sp)
lw gp, 0x18(sp)
lw s3, 0x30(sp)
lw s2, 0x2c(sp)
lw s1, 0x28(sp)
lw s0, 0x24(sp)
jr ra
addiu sp, sp, 0x38
lui gp, 0x42
addiu sp, sp, -0x428
addiu gp, gp, 0x35d0
sw ra, 0x424(sp)
sw s0, 0x420(sp)
sw gp, 0x10(sp)
addiu v0, sp, 0x42c
addiu s0, sp, 0x1c
lw t9, -sym.imp.vsnprintf(gp)
sw a1, 0x42c(sp)
sw a2, 0x430(sp)
sw a3, 0x434(sp)
move a2, a0
move a3, v0
move a0, s0
sw v0, 0x18(sp)
jalr t9
addiu a1, zero, 0x400
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.system(gp)
nop
jalr t9
move a0, s0
lw ra, 0x424(sp)
lw gp, 0x10(sp)
lw s0, 0x420(sp)
jr ra
addiu sp, sp, 0x428
lui gp, 0x42
addiu sp, sp, -0x438
addiu gp, gp, 0x35d0
sw ra, 0x434(sp)
sw s4, 0x430(sp)
sw s3, 0x42c(sp)
sw s2, 0x428(sp)
sw s1, 0x424(sp)
sw s0, 0x420(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.vsnprintf(gp)
addiu v0, sp, 0x444
addiu s0, sp, 0x1c
sw a3, 0x444(sp)
move s2, a0
move a3, v0
move a0, s0
move s3, a1
sw v0, 0x18(sp)
jalr t9
addiu a1, zero, 0x400
lw gp, 0x10(sp)
lui a1, 0x41
lw t9, -sym.imp.popen(gp)
move a0, s0
jalr t9
addiu a1, a1, -0x5840
lw gp, 0x10(sp)
beqz v0, 0x40a1cc
move s1, v0
addiu s3, s3, -1
[*] Function printf used 38 times igmpproxy