[*] Binary protection state of rt3052esw
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function printf tear down of rt3052esw
lw t9, -sym.imp.usleep(gp)
nop
jr t9
nop
lui gp, 0x42
addiu sp, sp, -0x38
addiu gp, gp, -0x6960
sw ra, 0x34(sp)
sw s4, 0x30(sp)
sw s3, 0x2c(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
lw t9, -sym.imp.fopen(gp)
lui s4, 0x40
andi s3, a1, 0xff
lui a1, 0x40
andi s2, a0, 0xff
addiu a1, a1, 0x13d8
addiu a0, s4, 0x13c0
jalr t9
move s1, a2
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.fprintf(gp)
beqz v0, 0x4009fc
move s0, v0
lui a1, 0x40
sw s1, 0x10(sp)
move a2, s2
move a3, s3
move a0, v0
jalr t9
addiu a1, a1, 0x13dc
lw gp, 0x18(sp)
move a0, s0
lw t9, -sym.imp.fclose(gp)
lw ra, 0x34(sp)
lw s4, 0x30(sp)
lw s3, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
jr t9
addiu sp, sp, 0x38
--
lw a0, (s0)
jalr t9
nop
lw gp, 0x10(sp)
b 0x400b38
move s1, v0
lw t9, -sym.imp.puts(gp)
nop
jalr t9
move a0, s3
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.getopt(gp)
lw a0, 0x68(sp)
move a1, s5
jalr t9
move a2, s4
lw gp, 0x10(sp)
bgtz v0, 0x400afc
nop
sltiu v0, s1, 5
bnez v0, 0x400b80
lui a1, 0x40
lw v0, -0x7fb0(gp)
lui a2, 0x40
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, 0x1440
b 0x400ed8
addiu a2, a2, 0x1638
lw t9, -sym.imp.socket(gp)
addiu a0, zero, 2
addiu a1, zero, 1
jalr t9
move a2, zero
lw gp, 0x10(sp)
bgez v0, 0x400bb8
move s0, v0
lw t9, -sym.imp.perror(gp)
lui a0, 0x40
jalr t9
addiu a0, a0, 0x1460
b 0x400c2c
nop
lui v1, 0x40
addiu v0, v1, 0x1468
--
move a1, s7
lw gp, 0x10(sp)
bnez v0, 0x400e60
nop
b 0x400e60
addiu s1, zero, 4
lw t9, -sym.imp.puts(gp)
b 0x400f50
addiu a0, a0, 0x14a4
addiu s1, zero, 1
lw t9, -sym.imp.getopt(gp)
lw a0, 0x68(sp)
lui a2, 0x40
move a1, s5
jalr t9
addiu a2, a2, 0x1584
lw gp, 0x10(sp)
bgtz v0, 0x400d74
nop
sltiu v0, s2, 5
bnez v0, 0x400eb4
sltiu v0, s1, 5
lw v0, -0x7fb0(gp)
lui a1, 0x40
lui a2, 0x40
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, 0x1440
addiu a2, a2, 0x1644
b 0x400edc
move a3, s2
bnez v0, 0x400ef0
sll v0, s1, 2
lw v0, -0x7fb0(gp)
lui a1, 0x40
lui a2, 0x40
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
addiu a1, a1, 0x158c
addiu a2, a2, 0x1644
move a3, s1
jalr t9
nop
lw gp, 0x10(sp)
b 0x400f60
addiu v1, zero, -1
lui v1, 0x40
addiu v1, v1, 0x1624
addu v1, v1, v0
lw v0, (v1)
nop
addu v0, v0, gp
jr v0
nop
b 0x400f34
addiu a2, zero, 0x2100
b 0x400f34
--
lw s3, 0x4c(sp)
lw s2, 0x48(sp)
lw s1, 0x44(sp)
lw s0, 0x40(sp)
jr ra
addiu sp, sp, 0x68
lui gp, 0x42
addiu sp, sp, -0x70
addiu gp, gp, -0x6960
sw ra, 0x6c(sp)
sw s3, 0x68(sp)
sw s2, 0x64(sp)
sw s1, 0x60(sp)
sw s0, 0x5c(sp)
sw gp, 0x10(sp)
lw t9, -sym.imp.fopen(gp)
lui s3, 0x40
andi s2, a1, 0xff
lui a1, 0x40
andi s1, a0, 0xff
addiu a1, a1, 0x13d8
jalr t9
addiu a0, s3, 0x13c0
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.fprintf(gp)
beqz v0, 0x40119c
move s0, v0
lui a1, 0x40
move a2, s1
addiu a1, a1, 0x15c0
move a3, s2
jalr t9
move a0, v0
lw gp, 0x10(sp)
move a0, s0
lw t9, -sym.imp.fclose(gp)
nop
jalr t9
lui s0, 0x40
lw gp, 0x10(sp)
lui a1, 0x40
lw t9, -sym.imp.fopen(gp)
addiu a1, a1, 0x15e4
jalr t9
addiu a0, s0, 0x15cc
--
b 0x401120
addu s0, a0, t2
beqz v0, 0x401154
nop
addu s0, t0, t2
addiu t1, t1, 1
lb a1, (t1)
mult s0, a3
andi a0, a1, 0xff
addiu v0, a0, -0x30
addiu v1, a0, -0x61
andi v0, v0, 0xff
andi v1, v1, 0xff
mflo t0
sltiu v0, v0, 0xa
addiu a2, a1, -0x30
bnez a1, 0x4010d8
sltiu v1, v1, 6
lw t9, -sym.imp.fclose(gp)
nop
jalr t9
move a0, s1
b 0x4011c0
nop
lw v0, -0x7fb0(gp)
lw t9, -sym.imp.fprintf(gp)
lw a0, (v0)
lui a1, 0x40
lui a2, 0x40
addiu a3, s0, 0x15cc
addiu a1, a1, 0x15e8
jalr t9
addiu a2, a2, 0x165c
lw gp, 0x10(sp)
b 0x4011c4
addiu s0, zero, -1
lw v0, -0x7fb0(gp)
lui a1, 0x40
lui a2, 0x40
lw a0, (v0)
addiu a1, a1, 0x13f0
addiu a2, a2, 0x165c
addiu a3, s3, 0x13c0
jalr t9
addiu s0, zero, -1
lw gp, 0x10(sp)
[*] Function printf used 6 times rt3052esw
