[*] Binary protection state of igmpproxy
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of igmpproxy
lui v0, 0x41
slti v0, a0, 0x17
beqz v0, 0x404010
addiu v0, zero, 0x17
addiu v0, zero, 0x11
beq a0, v0, 0x40402c
lui v0, 0x41
addiu v0, zero, 0x12
bne a0, v0, 0x404044
lui v0, 0x41
b 0x404068
addiu v0, v0, -0x5498
beq a0, v0, 0x40403c
lui v0, 0x41
addiu v0, zero, 0x22
bne a0, v0, 0x404044
lui v0, 0x41
b 0x404068
addiu v0, v0, -0x544c
b 0x404068
addiu v0, v0, -0x5484
b 0x404068
addiu v0, v0, -0x5470
b 0x404068
addiu v0, v0, -0x545c
lw t9, -sym.imp.sprintf(gp)
lui s0, 0x42
lui a1, 0x41
move a2, a0
addiu a1, a1, -0x5438
jalr t9
addiu a0, s0, -0x4660
lw gp, 0x10(sp)
addiu v0, s0, -0x4660
lw ra, 0x1c(sp)
lw s0, 0x18(sp)
jr ra
addiu sp, sp, 0x20
lui gp, 0x42
addiu sp, sp, -0x2d0
addiu gp, gp, 0x35d0
sw ra, 0x2cc(sp)
sw s7, 0x2c8(sp)
sw s6, 0x2c4(sp)
sw s5, 0x2c0(sp)
sw s4, 0x2bc(sp)
--
addiu s4, v0, -0x4f98
lui v0, 0x42
addiu s3, v0, -0x2624
lw gp, 0x28(sp)
addiu s0, v1, -0x4624
lw v0, -0x4624(v1)
addiu s2, zero, -1
b 0x4066f4
addiu s1, sp, 0x30
lbu v0, 6(s0)
lw a2, (s0)
lhu a3, 4(s0)
jalr t9
sw v0, 0x10(sp)
lw gp, 0x28(sp)
nop
lw t9, -sym.imp.puts(gp)
nop
jalr t9
move a0, s1
lw v0, 8(s0)
addiu s0, s0, 8
lw gp, 0x28(sp)
beq s0, s3, 0x406704
nop
lw t9, -sym.imp.sprintf(gp)
move a0, s1
bne v0, s2, 0x4066b4
move a1, s4
lw ra, 0xd4(sp)
lw fp, 0xd0(sp)
lw s7, 0xcc(sp)
lw s6, 0xc8(sp)
lw s5, 0xc4(sp)
lw s4, 0xc0(sp)
lw s3, 0xbc(sp)
lw s2, 0xb8(sp)
lw s1, 0xb4(sp)
lw s0, 0xb0(sp)
jr ra
addiu sp, sp, 0xd8
lui gp, 0x42
addiu sp, sp, -0x20
addiu gp, gp, 0x35d0
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
--
bnez v0, 0x40698c
addiu a0, zero, 0x3e8
jalr t9
nop
lw gp, 0x10(sp)
bne s0, s1, 0x406954
addiu a0, zero, 0x34
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 0x42
addiu sp, sp, -0x58
addiu gp, gp, 0x35d0
sw ra, 0x54(sp)
sw s3, 0x50(sp)
sw s2, 0x4c(sp)
sw s1, 0x48(sp)
sw s0, 0x44(sp)
sw gp, 0x18(sp)
lbu v1, 2(a0)
lbu v0, 1(a0)
lbu a3, (a0)
lw t9, -sym.imp.sprintf(gp)
addiu s1, sp, 0x2c
lui a2, 0x41
move s3, a1
lui a1, 0x41
sw v1, 0x14(sp)
move s2, a0
addiu a2, a2, -0x4f4c
addiu a1, a1, -0x4f5c
move a0, s1
jalr t9
sw v0, 0x10(sp)
lw gp, 0x18(sp)
addiu s0, sp, 0x20
lw t9, -sym.imp.strncpy(gp)
move a1, s1
move a0, s0
jalr t9
addiu a2, zero, 8
lw gp, 0x18(sp)
addiu a2, zero, 0x10
[*] Function sprintf used 3 times igmpproxy