[*] Binary protection state of updatewifistats
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of updatewifistats
sw s2, 0x40(sp)
sw s1, 0x3c(sp)
sw s0, 0x38(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.strncpy(gp)
addiu s0, sp, 0x18
move s1, a0
addiu a2, zero, 0x10
move a0, s0
jalr t9
move s2, a1
lw gp, 0x10(sp)
move a0, s1
lw t9, -sym.imp.ioctl(gp)
move a2, s0
jalr t9
ori a1, zero, 0x8915
lw gp, 0x10(sp)
bltz v0, 0x403c48
addiu v0, zero, 2
lhu v1, 0x28(sp)
nop
beq v1, v0, 0x403c6c
move a0, zero
lw v0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
lui a1, 0x40
addiu a1, a1, 0x6ac8
jalr t9
move a2, s2
lw gp, 0x10(sp)
addiu a0, zero, -1
lw ra, 0x44(sp)
move v0, a0
lw s2, 0x40(sp)
lw s1, 0x3c(sp)
lw s0, 0x38(sp)
jr ra
addiu sp, sp, 0x48
lui gp, 0x42
addiu sp, sp, -0x48
addiu gp, gp, -0xaa0
sw ra, 0x44(sp)
sw s2, 0x40(sp)
sw s1, 0x3c(sp)
sw s0, 0x38(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.strncpy(gp)
addiu s0, sp, 0x18
move s1, a0
addiu a2, zero, 0x10
move a0, s0
jalr t9
move s2, a1
lw gp, 0x10(sp)
move a0, s1
lw t9, -sym.imp.ioctl(gp)
move a2, s0
jalr t9
ori a1, zero, 0x8927
lw gp, 0x10(sp)
bltz v0, 0x403cf8
addiu v0, zero, 1
lhu v1, 0x28(sp)
nop
beq v1, v0, 0x403d1c
move a0, zero
lw v0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
lui a1, 0x40
addiu a1, a1, 0x6af4
jalr t9
move a2, s2
lw gp, 0x10(sp)
addiu a0, zero, -1
lw ra, 0x44(sp)
move v0, a0
lw s2, 0x40(sp)
lw s1, 0x3c(sp)
lw s0, 0x38(sp)
jr ra
addiu sp, sp, 0x48
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0xaa0
sw ra, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
--
sw ra, 0x94(sp)
sw s5, 0x90(sp)
sw s4, 0x8c(sp)
sw s3, 0x88(sp)
sw s2, 0x84(sp)
sw s1, 0x80(sp)
sw s0, 0x7c(sp)
sw gp, 0x18(sp)
lw t9, -sym.imp.strchr(gp)
move s2, a0
move s3, a1
move a0, a2
addiu a1, zero, 0x3a
move s4, a2
jalr t9
move s5, a3
bnez v0, 0x4045a0
move a0, s2
jal 0x403bd8
move a1, s3
lw gp, 0x18(sp)
bgez v0, 0x404490
addiu s1, sp, 0x20
lw v0, -0x7f3c(gp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
b 0x4045c4
addiu a1, a1, 0x6bac
move a0, s4
jal 0x4042a8
move a1, s1
lw gp, 0x18(sp)
bgez v0, 0x4044d4
addiu s0, sp, 0x30
lw v0, -0x7f3c(gp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, 0x6bdc
move a2, s4
jalr t9
nop
lw gp, 0x18(sp)
b 0x4045f0
addiu v0, zero, -1
lw t9, -sym.imp.memcpy(gp)
move a1, s1
move a0, s0
jalr t9
addiu a2, zero, 0x10
lw gp, 0x18(sp)
addiu a0, sp, 0x64
lw t9, -sym.imp.strncpy(gp)
move a1, s3
addiu a2, zero, 0x10
sh zero, 0x40(sp)
jalr t9
sw zero, 0x50(sp)
lw gp, 0x18(sp)
move a0, s2
lw t9, -sym.imp.ioctl(gp)
move a2, s0
jalr t9
ori a1, zero, 0x8954
lw gp, 0x18(sp)
bltz v0, 0x404540
nop
lw v0, 0x50(sp)
nop
andi v0, v0, 2
bnez v0, 0x404584
addiu a1, sp, 0x40
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
lw v1, (v0)
lw v0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
lui a1, 0x40
sw v1, 0x10(sp)
addiu a1, a1, 0x6bfc
move a2, s4
jalr t9
move a3, s3
b 0x4044c8
nop
lw t9, -sym.imp.memcpy(gp)
move a0, s5
jalr t9
addiu a2, zero, 0x10
lw gp, 0x18(sp)
b 0x4045f0
move v0, zero
jal 0x403c88
move a1, s3
lw gp, 0x18(sp)
bgez v0, 0x4045cc
lui a1, 0x40
lw v0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, 0x6c48
b 0x4044c0
move a2, s3
addiu v0, zero, 1
sh v0, (s5)
addiu a1, s5, 2
jal 0x4040c0
move a0, s4
lw gp, 0x18(sp)
beqz v0, 0x404614
lui a1, 0x40
move v0, zero
lw ra, 0x94(sp)
lw s5, 0x90(sp)
lw s4, 0x8c(sp)
lw s3, 0x88(sp)
lw s2, 0x84(sp)
lw s1, 0x80(sp)
lw s0, 0x7c(sp)
jr ra
addiu sp, sp, 0x98
lw v0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
b 0x4044bc
addiu a1, a1, 0x6c7c
lui gp, 0x42
addiu sp, sp, -0x30
addiu gp, gp, -0xaa0
sw ra, 0x2c(sp)
sw gp, 0x20(sp)
lbu t0, 5(a0)
lbu a2, (a0)
lbu a3, 1(a0)
lbu v0, 2(a0)
lbu v1, 3(a0)
lbu a0, 4(a0)
lw t9, -sym.imp.sprintf(gp)
sw a0, 0x18(sp)
move a0, a1
lui a1, 0x40
sw v0, 0x10(sp)
sw v1, 0x14(sp)
--
jal 0x403d38
sh zero, 0x2e(sp)
lw gp, 0x10(sp)
bltz v0, 0x405288
addiu v1, zero, -1
lw t9, -sym.imp.memcpy(gp)
move a1, s1
move a0, s2
jalr t9
addiu a2, zero, 0x234
lui v0, 0x41
lw v0, 0x7710(v0)
lw gp, 0x10(sp)
bnez v0, 0x40527c
addiu v1, zero, 1
lhu v0, 0x2c(sp)
nop
sltiu v0, v0, 0x12c
bnez v0, 0x405224
lui a1, 0x40
lbu a3, 0x118(s2)
addiu v0, zero, 0x10
beq a3, v0, 0x4051bc
lui a1, 0x40
lw s0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (s0)
addiu a1, a1, 0x6e60
jalr t9
move a2, s3
lw gp, 0x10(sp)
lw a0, (s0)
lw t9, -sym.imp.fprintf(gp)
lui a1, 0x40
addiu a1, a1, 0x6ea4
jalr t9
addiu a2, zero, 0x10
lw gp, 0x10(sp)
lw a1, (s0)
lw t9, -sym.imp.fputs(gp)
lui a0, 0x40
jalr t9
addiu a0, a0, 0x6ee4
lw gp, 0x10(sp)
lbu a3, 0x119(s2)
lbu v0, 0x118(s2)
nop
sltu v0, v0, a3
beqz v0, 0x40527c
addiu v1, zero, 1
lw s0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (s0)
lui a1, 0x40
addiu a1, a1, 0x6f04
jalr t9
move a2, s3
lw gp, 0x10(sp)
lw a0, (s0)
lw t9, -sym.imp.fprintf(gp)
lbu a2, 0x118(s2)
lui a1, 0x40
jalr t9
addiu a1, a1, 0x6f50
lw gp, 0x10(sp)
lui a0, 0x40
lw a1, (s0)
lw t9, -sym.imp.fputs(gp)
b 0x40526c
addiu a0, a0, 0x6f98
lw s0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (s0)
addiu a1, a1, 0x6fb4
jalr t9
move a2, s3
lw gp, 0x10(sp)
lw a0, (s0)
lw t9, -sym.imp.fprintf(gp)
lui a1, 0x40
addiu a1, a1, 0x6ea4
jalr t9
addiu a2, zero, 0x10
lw gp, 0x10(sp)
lui a0, 0x40
lw a1, (s0)
lw t9, -sym.imp.fputs(gp)
addiu a0, a0, 0x6ee4
jalr t9
nop
lw gp, 0x10(sp)
addiu v1, zero, 1
lui v0, 0x41
sw v1, 0x7710(v0)
move v1, zero
lw ra, 0x4b4(sp)
move v0, v1
lw s3, 0x4b0(sp)
lw s2, 0x4ac(sp)
--
move s3, a0
jal 0x403d38
move s1, a1
lw gp, 0x10(sp)
bltz v0, 0x4053a8
addiu v1, zero, -1
lw t9, -sym.imp.memset(gp)
addiu s0, sp, 0x38
move a0, s0
move a1, zero
jalr t9
addiu a2, zero, 0x468
addiu v0, zero, 0x468
move a0, s3
move a3, s2
move a1, s1
ori a2, zero, 0x8b0b
sh v0, 0x2c(sp)
sw s0, 0x28(sp)
jal 0x403d38
sh zero, 0x2e(sp)
lw gp, 0x10(sp)
bgez v0, 0x405358
lui a1, 0x40
lw v0, -0x7f3c(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, 0x7000
jalr t9
move a2, s1
b 0x4053a0
nop
lhu v0, 0x2c(sp)
nop
sltiu v0, v0, 0x12c
bnez v0, 0x4053a8
move v1, zero
lw t9, -sym.imp.printf(gp)
lbu a2, 0x119(s0)
lui a0, 0x40
addiu a0, a0, 0x7040
jalr t9
move a1, s1
lw gp, 0x10(sp)
lui a0, 0x40
lbu a1, 0x118(s0)
--
sw v0, 0x2c(sp)
move a0, s6
addiu v0, zero, 1
move a1, s5
ori a2, zero, 0x8b02
sw v1, 0x28(sp)
jal 0x404058
sb v0, 0x2c(sp)
lw gp, 0x10(sp)
bgez v0, 0x40593c
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f3c(gp)
nop
lw s0, (v0)
jalr t9
addiu s2, zero, -1
lw gp, 0x10(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s0
addiu a1, a1, 0x7128
jalr t9
move a2, v0
lw gp, 0x10(sp)
b 0x405940
nop
move s2, zero
lw v0, 0x20(s3)
nop
beqz v0, 0x4059d4
nop
lwc1 f12, 0x28(s3)
nop
lwc1 f13, 0x2c(s3)
jal 0x403710
addiu a2, sp, 0x28
move a0, s6
move a1, s5
ori a2, zero, 0x8b04
jal 0x404058
addiu a3, sp, 0x18
lw gp, 0x10(sp)
bgez v0, 0x4059d4
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f3c(gp)
nop
lw s0, (v0)
jalr t9
addiu s2, zero, -1
lw gp, 0x10(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s0
addiu a1, a1, 0x713c
jalr t9
move a2, v0
lw gp, 0x10(sp)
lw v0, 0x30(s3)
nop
beqz v0, 0x405b04
nop
lw s4, 0x58(s3)
nop
andi v0, s4, 0xff
beqz v0, 0x405a74
ori v0, v0, 0x800
move a0, s6
move a1, s5
ori a2, zero, 0x8b2a
addiu a3, sp, 0x18
sh v0, 0x2e(sp)
sw zero, 0x28(sp)
jal 0x404058
sh zero, 0x2c(sp)
lw gp, 0x10(sp)
bgez v0, 0x405a74
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f3c(gp)
nop
lw s1, (v0)
jalr t9
addiu s2, zero, -1
lw gp, 0x10(sp)
lw s0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s1
addiu a1, a1, 0x7150
move a2, s0
jalr t9
move a3, v0
lw v0, 0x54(s3)
addiu v1, zero, -0x100
and v1, s4, v1
addiu t0, s3, 0x34
move a0, s6
move a1, s5
ori a2, zero, 0x8b2a
addiu a3, sp, 0x18
sw t0, 0x28(sp)
sh v0, 0x2c(sp)
jal 0x404058
sh v1, 0x2e(sp)
lw gp, 0x10(sp)
bgez v0, 0x405b04
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f3c(gp)
nop
lw s1, (v0)
jalr t9
addiu s2, zero, -1
lw gp, 0x10(sp)
lw s0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s1
addiu a1, a1, 0x7150
move a2, s0
jalr t9
move a3, v0
lw gp, 0x10(sp)
lw v0, 0x5c(s3)
nop
beqz v0, 0x405ba4
addiu v0, s3, 0x64
lw t9, -sym.imp.strlen(gp)
move a0, v0
jalr t9
sw v0, 0x28(sp)
lw v1, 0x60(s3)
addiu v0, v0, 1
move a0, s6
move a1, s5
ori a2, zero, 0x8b1a
addiu a3, sp, 0x18
sh v0, 0x2c(sp)
jal 0x404058
sh v1, 0x2e(sp)
lw gp, 0x10(sp)
bgez v0, 0x405ba4
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f3c(gp)
nop
lw s0, (v0)
jalr t9
addiu s2, zero, -1
lw gp, 0x10(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s0
addiu a1, a1, 0x7168
jalr t9
move a2, v0
lw gp, 0x10(sp)
lw v0, 0x88(s3)
nop
beqz v0, 0x405c40
addiu s0, sp, 0x18
lw t9, -sym.imp.strncpy(gp)
move a0, s0
move a1, s5
jalr t9
addiu a2, zero, 0x10
lw v0, 0x8c(s3)
move a0, s6
move a1, s5
move a3, s0
ori a2, zero, 0x8b06
jal 0x403d38
sw v0, 0x28(sp)
lw gp, 0x10(sp)
bgez v0, 0x405c40
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f3c(gp)
nop
lw s0, (v0)
jalr t9
addiu s2, zero, -1
lw gp, 0x10(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s0
addiu a1, a1, 0x717c
jalr t9
move a2, v0
lw gp, 0x10(sp)
lw ra, 0x54(sp)
move v0, s2
lw s6, 0x50(sp)
lw s5, 0x4c(sp)
lw s4, 0x48(sp)
lw s3, 0x44(sp)
lw s2, 0x40(sp)
lw s1, 0x3c(sp)
lw s0, 0x38(sp)
jr ra
addiu sp, sp, 0x58
lui gp, 0x42
addiu sp, sp, -0x460
addiu gp, gp, -0xaa0
sw ra, 0x45c(sp)
--
lw t9, -sym.imp.ioctl(gp)
addiu v0, zero, 0x400
sw v0, 0x18(sp)
sw s0, 0x1c(sp)
move a0, s5
ori a1, zero, 0x8912
jalr t9
addiu a2, sp, 0x18
lw gp, 0x10(sp)
bgez v0, 0x405e9c
nop
lw t9, -sym.imp.__errno_location(gp)
lw v0, -0x7f3c(gp)
nop
lw s0, (v0)
jalr t9
nop
lw gp, 0x10(sp)
lw a0, (v0)
lw t9, -sym.imp.strerror(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fprintf(gp)
move a0, s0
addiu a1, a1, 0x71bc
jalr t9
move a2, v0
lw gp, 0x10(sp)
b 0x405edc
nop
lw v0, 0x18(sp)
lw s1, 0x1c(sp)
b 0x405ec0
srl s0, v0, 5
lw t9, 0x464(sp)
nop
jalr t9
nop
lw gp, 0x10(sp)
addiu s0, s0, -1
move a1, s1
move a0, s5
lw a2, 0x468(sp)
[*] Function fprintf used 21 times updatewifistats
