[*] Binary protection state of portt
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH Symbols
[*] Function printf tear down of portt
lw gp, 0x10(sp)
lui a0, 0x41
lw v0, 0x2204(a0)
nop
beqz v0, 0x400afc
nop
lw t9, -0x7f60(gp)
nop
beqz t9, 0x400afc
addiu a0, a0, 0x2204
lw ra, 0x1c(sp)
jr t9
addiu sp, sp, 0x20
lw ra, 0x1c(sp)
nop
jr ra
addiu sp, sp, 0x20
nop
lui gp, 0x42
addiu sp, sp, -0x228
addiu gp, gp, -0x5dd0
sw ra, 0x224(sp)
sw s0, 0x220(sp)
sw gp, 0x10(sp)
addiu v0, sp, 0x22c
lw t9, -sym.imp.vsnprintf(gp)
addiu s0, sp, 0x1c
sw a1, 0x22c(sp)
sw a2, 0x230(sp)
sw a3, 0x234(sp)
move a2, a0
sw v0, 0x18(sp)
move a3, v0
move a0, s0
jalr t9
addiu a1, zero, 0x200
lui v0, 0x41
lw v0, 0x2318(v0)
lw gp, 0x10(sp)
beqz v0, 0x400b88
nop
lw t9, -sym.imp.puts(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
--
jr ra
addiu sp, sp, 0x228
lui gp, 0x42
addiu sp, sp, -0xc8
addiu gp, gp, -0x5dd0
sw ra, 0xc4(sp)
sw s7, 0xc0(sp)
sw s6, 0xbc(sp)
sw s5, 0xb8(sp)
sw s4, 0xb4(sp)
sw s3, 0xb0(sp)
sw s2, 0xac(sp)
sw s1, 0xa8(sp)
sw s0, 0xa4(sp)
sw gp, 0x18(sp)
lui v0, 0x40
move s3, a1
move s7, a0
addiu s6, v0, 0x1dc4
move s2, a1
addiu s0, sp, 0x20
move s1, zero
addiu s5, zero, 0x2c
b 0x400c6c
addiu s4, zero, 0x3a
lw t9, -sym.imp.sprintf(gp)
lhu a2, 0x40(s2)
jalr t9
move a1, s6
lw gp, 0x18(sp)
lb v0, (s0)
nop
bnez v0, 0x400c1c
addiu s0, s0, 1
addiu s0, s0, -1
lw v0, 0x40(s2)
nop
bgez v0, 0x400c48
addiu v0, s1, 1
b 0x400c60
sb s4, (s0)
lw v1, 8(s3)
nop
slt v0, v0, v1
beqz v0, 0x400c64
nop
--
lw gp, 0x18(sp)
lw ra, 0xc4(sp)
lw s7, 0xc0(sp)
lw s6, 0xbc(sp)
lw s5, 0xb8(sp)
lw s4, 0xb4(sp)
lw s3, 0xb0(sp)
lw s2, 0xac(sp)
lw s1, 0xa8(sp)
lw s0, 0xa4(sp)
jr ra
addiu sp, sp, 0xc8
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0x5dd0
sw ra, 0x24(sp)
sw gp, 0x10(sp)
lui v0, 0x41
lw v0, 0x2314(v0)
sw a1, 0x2c(sp)
sw a2, 0x30(sp)
sw a3, 0x34(sp)
beqz v0, 0x400d78
move a1, a0
lw v0, -0x7f84(gp)
lw t9, -sym.imp.vfprintf(gp)
addiu a2, sp, 0x2c
lw a0, (v0)
jalr t9
sw a2, 0x18(sp)
lw gp, 0x10(sp)
lw ra, 0x24(sp)
nop
jr ra
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x11c8
addiu gp, gp, -0x5dd0
sw ra, 0x11c4(sp)
sw fp, 0x11c0(sp)
sw s7, 0x11bc(sp)
sw s6, 0x11b8(sp)
sw s5, 0x11b4(sp)
sw s4, 0x11b0(sp)
sw s3, 0x11ac(sp)
sw s2, 0x11a8(sp)
--
lw t9, -sym.imp.memset(gp)
beqz v0, 0x401524
lui a0, 0x41
addiu a0, sp, 0xa0
move a1, zero
jalr t9
addiu a2, zero, 0x7c
lw gp, 0x18(sp)
lui a1, 0x40
lw t9, -sym.imp.strstr(gp)
move a0, s1
jalr t9
addiu a1, a1, 0x1ec0
lw gp, 0x18(sp)
beqz v0, 0x401094
move a0, s1
lw t9, -sym.imp.strchr(gp)
nop
jalr t9
addiu a1, zero, 0x2c
lw gp, 0x18(sp)
beqz v0, 0x4012dc
move s0, v0
sb zero, (v0)
lui v0, 0x41
lw t9, -sym.imp.sprintf(gp)
lw a2, 0x231c(v0)
lui a1, 0x40
move a3, s1
addiu a1, a1, 0x1ec4
jalr t9
addiu a0, sp, 0xc0
lb v0, 1(s0)
lw gp, 0x18(sp)
bnez v0, 0x4010b0
addiu s1, s0, 1
b 0x4012e0
addiu s4, zero, -1
lui v0, 0x41
lw t9, -sym.imp.strcpy(gp)
lw a1, 0x231c(v0)
jalr t9
addiu a0, sp, 0xc0
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.strchr(gp)
--
beqz a0, 0x4016c4
nop
lw t9, -sym.imp.free(gp)
nop
jalr t9
nop
lui a0, 0x40
lui a1, 0x40
addiu a0, a0, 0x2060
addiu a1, a1, 0x2078
jal sym.verbose
move a2, s0
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.exit(gp)
nop
jalr t9
move a0, s0
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0x5dd0
sw ra, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.printf(gp)
lui s0, 0x40
move s1, a0
lui a0, 0x40
addiu a2, zero, 1
addiu a1, s0, 0x2078
jalr t9
addiu a0, a0, 0x2080
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.printf(gp)
addiu a1, s0, 0x2078
jalr t9
addiu a0, a0, 0x2090
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x20a8
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x20d8
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x2100
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x2124
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, 0x2150
lw gp, 0x10(sp)
lui a0, 0x40
lw t9, -sym.imp.printf(gp)
lui a1, 0x40
addiu a0, a0, 0x217c
jalr t9
addiu a1, a1, 0x21bc
lw gp, 0x10(sp)
move a0, s1
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
j sym.cleanup_exit
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x40
addiu gp, gp, -0x5dd0
sw ra, 0x3c(sp)
sw fp, 0x38(sp)
sw s7, 0x34(sp)
sw s6, 0x30(sp)
sw s5, 0x2c(sp)
sw s4, 0x28(sp)
[*] Function printf used 7 times portt
