[*] Binary protection state of veritysetup

  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols

[*] Function strcat tear down of veritysetup

    ; assembly                           | /* r2dec pseudo code output */

                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/veritysetup @ 0x50c0 */

                                         | #include <stdint.h>

                                         |  

    ; (fcn) sym.clogger ()               | void clogger () {

    0x000050c0 lui gp, 2                 |     

    0x000050c4 addiu gp, gp, 0x12c0      |     

    0x000050c8 addu gp, gp, t9           |     gp += t9;

    0x000050cc addiu sp, sp, -0x1048     |     

    0x000050d0 addiu v0, sp, 0x105c      |     v0 = sp + 0x105c;

    0x000050d4 sw s0, 0x1034(sp)         |     *(var_1034h) = s0;

    0x000050d8 lw s0, -0x7d98(gp)        |     s0 = *((gp - 8038));

    0x000050dc sw v0, 0x24(sp)           |     *(var_24h) = v0;

    0x000050e0 lw t9, -0x7e18(gp)        |     t9 = sym.imp.__vsnprintf_chk;

    0x000050e4 lw v1, (s0)               |     v1 = *(s0);

    0x000050e8 sw v0, 0x14(sp)           |     *(var_14h) = v0;

    0x000050ec lw v0, 0x1058(sp)         |     v0 = *(arg_1058h);

    0x000050f0 sw s1, 0x1038(sp)         |     *(var_1038h) = s1;

    0x000050f4 addiu s1, sp, 0x28        |     s1 = sp + 0x28;

    0x000050f8 sw gp, 0x18(sp)           |     *(var_18h) = gp;

    0x000050fc sw s3, 0x1040(sp)         |     *(var_1040h) = s3;

    0x00005100 sw s2, 0x103c(sp)         |     *(var_103ch) = s2;

    0x00005104 sw ra, 0x1044(sp)         |     *(var_1044h) = ra;

    0x00005108 move s3, a0               |     s3 = a0;

    0x0000510c move s2, a1               |     s2 = a1;

    0x00005110 sw v0, 0x10(sp)           |     *(var_10h) = v0;

    0x00005114 addiu a3, zero, 0x1002    |     a3 = 0x1002;

    0x00005118 addiu a2, zero, 1         |     a2 = 1;

    0x0000511c addiu a1, zero, 0x1000    |     a1 = 0x1000;

    0x00005120 move a0, s1               |     a0 = s1;

    0x00005124 sw v1, 0x102c(sp)         |     *(var_102ch) = v1;

    0x00005128 jalr t9                   |     t9 ();

    0x0000512c nop                       |     

    0x00005130 lw gp, 0x18(sp)           |     gp = *(var_18h);

                                         |     if (v0 <= 0) {

    0x00005134 blez v0, 0x5168           |         goto label_0;

                                         |     }

    0x00005138 addiu v0, s2, -1          |     v0 = s2 + -1;

    0x0000513c sltiu v0, v0, 2           |     v0 = (v0 < 2) ? 1 : 0;

    0x00005140 addiu v0, s2, 2           |     v0 = s2 + 2;

                                         |     if (v0 != 0) {

    0x00005144 bnez v0, 0x5190           |         goto label_1;

                                         |     }

    0x00005148 sltiu v0, v0, 2           |     v0 = (v0 < 2) ? 1 : 0;

    0x0000514c lw t9, -0x7ef8(gp)        |     t9 = sym.imp.crypt_log;

                                         |     if (v0 != 0) {

    0x00005150 bnez v0, 0x5190           |         goto label_1;

                                         |     }

    0x00005154 move a2, s1               |     a2 = s1;

    0x00005158 move a1, s2               |     a1 = s2;

    0x0000515c move a0, s3               |     a0 = s3;

    0x00005160 jalr t9                   |     t9 ();

    0x00005164 lw gp, 0x18(sp)           |     gp = *(var_18h);

                                         |     do {

                                         | label_0:

    0x00005168 lw v1, 0x102c(sp)         |         v1 = *(var_102ch);

    0x0000516c lw v0, (s0)               |         v0 = *(s0);

    0x00005170 lw ra, 0x1044(sp)         |         ra = *(var_1044h);

                                         |         if (v1 != v0) {

    0x00005174 bne v1, v0, 0x51c8        |             goto label_2;

                                         |         }

    0x00005178 lw s3, 0x1040(sp)         |         s3 = *(var_1040h);

    0x0000517c lw s2, 0x103c(sp)         |         s2 = *(var_103ch);

    0x00005180 lw s1, 0x1038(sp)         |         s1 = *(var_1038h);

    0x00005184 lw s0, 0x1034(sp)         |         s0 = *(var_1034h);

    0x00005188 addiu sp, sp, 0x1048      |         

    0x0000518c jr ra                     |         return v1;

                                         | label_1:

    0x00005190 lw a1, -0x7fd8(gp)        |         a1 = *((gp - 8182));

    0x00005194 lw t9, -0x7e3c(gp)        |         t9 = sym.imp.__strcat_chk

    0x00005198 addiu a2, zero, 0x1002    |         a2 = 0x1002;

    0x0000519c addiu a1, a1, -0x3bdc     |         a1 += -0x3bdc;

    0x000051a0 move a0, s1               |         a0 = s1;

    0x000051a4 jalr t9                   |         t9 ();

    0x000051a8 lw gp, 0x18(sp)           |         gp = *(var_18h);

    0x000051ac move a2, s1               |         a2 = s1;

    0x000051b0 move a1, s2               |         a1 = s2;

    0x000051b4 lw t9, -0x7ef8(gp)        |         t9 = sym.imp.crypt_log;

    0x000051b8 move a0, s3               |         a0 = s3;

    0x000051bc jalr t9                   |         t9 ();

    0x000051c0 lw gp, 0x18(sp)           |         gp = *(var_18h);

    0x000051c4 b 0x5168                  |         

                                         |     } while (1);

                                         | label_2:

    0x000051c8 lw t9, -0x7e58(gp)        |     t9 = sym.imp.__stack_chk_fail;

    0x000051cc jalr t9                   |     t9 ();

    0x000051d0 nop                       |     

                                         | }

[*] Function strcat used 2 times veritysetup