[*] Binary protection state of htdigest

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function strcpy tear down of htdigest

    ; assembly                           | /* r2dec pseudo code output */
                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/htdigest @ 0xc50 */
                                         | #include <stdint.h>
                                         |  
    ; (fcn) main ()                      | int32_t main () {
                                         |     /* [13] -r-x section size 3344 named .text */
    0x00000c50 lui gp, 2                 |     
    0x00000c54 addiu gp, gp, -0x6c40     |     
    0x00000c58 addu gp, gp, t9           |     gp += t9;
    0x00000c5c lw v1, -0x7fd8(gp)        |     v1 = *((gp - 8182));
    0x00000c60 lw a2, -0x7f54(gp)        |     a2 = *((gp - 8149));
    0x00000c64 addiu v0, v1, 0x1dd8      |     v0 = v1 + str.htdigest.tmp.XXXXXX;
    0x00000c68 addiu sp, sp, -0xa90      |     
    0x00000c6c lw t1, 0x1dd8(v1)         |     t1 = *(v1);
    0x00000c70 lw t2, (a2)               |     t2 = *(a2);
    0x00000c74 lw v1, 0xc(v0)            |     v1 = *((v0 + 3));
    0x00000c78 lw t0, 4(v0)              |     t0 = *((v0 + 1));
    0x00000c7c lw a3, 8(v0)              |     a3 = *((v0 + 2));
    0x00000c80 lw v0, 0x10(v0)           |     v0 = *((v0 + 4));
    0x00000c84 lw t9, -0x7f48(gp)        |     t9 = sym.imp.apr_app_initialize;
    0x00000c88 sw v1, 0x5c(sp)           |     *(var_5ch) = v1;
    0x00000c8c sw ra, 0xa8c(sp)          |     *(var_a8ch) = ra;
    0x00000c90 sw t2, 0xa64(sp)          |     *(var_a64h) = t2;
    0x00000c94 sw t1, 0x50(sp)           |     *(var_50h) = t1;
    0x00000c98 sw t0, 0x54(sp)           |     *(var_54h) = t0;
    0x00000c9c sw gp, 0x18(sp)           |     *(var_18h) = gp;
    0x00000ca0 sw a3, 0x58(sp)           |     *(var_58h) = a3;
    0x00000ca4 sw s0, 0xa68(sp)          |     *(var_a68h) = s0;
    0x00000ca8 sw a2, 0x38(sp)           |     *(var_38h) = a2;
    0x00000cac sw a0, 0xa90(sp)          |     *(arg_a90h) = a0;
    0x00000cb0 move a2, zero             |     a2 = 0;
    0x00000cb4 sw a1, 0x3c(sp)           |     *(var_3ch) = a1;
    0x00000cb8 addiu a0, sp, 0xa90       |     a0 = sp + 0xa90;
    0x00000cbc sw fp, 0xa88(sp)          |     *(var_a88h) = fp;
    0x00000cc0 sw s7, 0xa84(sp)          |     *(var_a84h) = s7;
    0x00000cc4 sw s6, 0xa80(sp)          |     *(var_a80h) = s6;
    0x00000cc8 sw s5, 0xa7c(sp)          |     *(var_a7ch) = s5;
    0x00000ccc sw s4, 0xa78(sp)          |     *(var_a78h) = s4;
    0x00000cd0 sw s3, 0xa74(sp)          |     *(var_a74h) = s3;
    0x00000cd4 sw s2, 0xa70(sp)          |     *(var_a70h) = s2;
    0x00000cd8 sw s1, 0xa6c(sp)          |     *(var_a6ch) = s1;
    0x00000cdc sw v0, 0x60(sp)           |     *(var_60h) = v0;
    0x00000ce0 addiu a1, sp, 0x3c        |     a1 = sp + 0x3c;
    0x00000ce4 jalr t9                   |     t9 ();
    0x00000ce8 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000cec lw s0, -0x7fd0(gp)        |     s0 = *(gp);
    0x00000cf0 lw a0, -0x7fd8(gp)        |     a0 = *((gp - 8182));
    0x00000cf4 lw t9, -0x7fcc(gp)        |     t9 = *(gp);
    0x00000cf8 addiu a0, a0, 0x15a8      |     a0 += 0x15a8;
    0x00000cfc sw s0, 0x34(sp)           |     *(var_34h) = s0;
    0x00000d00 bal 0x1940                |     fcn_00001940 ();
    0x00000d04 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000d08 move a3, zero             |     a3 = 0;
    0x00000d0c move a2, zero             |     a2 = 0;
    0x00000d10 lw t9, -0x7f50(gp)        |     t9 = sym.imp.apr_pool_create_ex;
    0x00000d14 move a0, s0               |     a0 = s0;
    0x00000d18 move a1, zero             |     a1 = 0;
    0x00000d1c jalr t9                   |     t9 ();
    0x00000d20 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000d24 lw t9, -0x7f5c(gp)        |     t9 = sym.imp.apr_file_open_stderr;
    0x00000d28 lw a0, -0x7fdc(gp)        |     a0 = *(gp);
    0x00000d2c lw a1, (s0)               |     a1 = *(s0);
    0x00000d30 jalr t9                   |     t9 ();
    0x00000d34 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000d38 addiu a0, zero, 2         |     a0 = 2;
    0x00000d3c lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x00000d40 lw t9, -0x7f98(gp)        |     t9 = sym.imp.apr_signal;
    0x00000d44 addiu a1, a1, 0x1564      |     a1 += 0x1564;
    0x00000d48 jalr t9                   |     t9 ();
    0x00000d4c lw v0, 0xa90(sp)          |     v0 = *(arg_a90h);
    0x00000d50 addiu v1, zero, 5         |     v1 = 5;
    0x00000d54 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 == v1) {
    0x00000d58 beq v0, v1, 0x114c        |         goto label_8;
                                         |     }
    0x00000d5c addiu v1, zero, 4         |     v1 = 4;
    0x00000d60 lw v0, 0x34(sp)           |     v0 = *(var_34h);
                                         |     if (v0 != v1) {
    0x00000d64 bne v0, v1, 0x12ac        |         goto label_9;
                                         |     }
    0x00000d68 lw t9, -0x7f58(gp)        |     t9 = sym.imp.apr_temp_dir_get;
    0x00000d6c addiu a0, sp, 0x4c        |     a0 = sp + 0x4c;
    0x00000d70 lw a1, (v0)               |     a1 = *(v0);
    0x00000d74 jalr t9                   |     t9 ();
    0x00000d78 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000d7c bnez v0, 0x1278           |         goto label_10;
                                         |     }
    0x00000d80 lw s0, 0x34(sp)           |     s0 = *(var_34h);
    0x00000d84 lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x00000d88 lw t9, -0x7f80(gp)        |     t9 = sym.imp.apr_psprintf;
    0x00000d8c lw a2, 0x4c(sp)           |     a2 = *(var_4ch);
    0x00000d90 lw a0, (s0)               |     a0 = *(s0);
    0x00000d94 addiu a3, sp, 0x50        |     a3 = sp + 0x50;
    0x00000d98 addiu a1, a1, 0x1ca4      |     a1 += str._s__s;
    0x00000d9c jalr t9                   |     t9 ();
    0x00000da0 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000da4 lw a3, (s0)               |     a3 = *(s0);
    0x00000da8 move a2, zero             |     a2 = 0;
    0x00000dac lw t9, -0x7f44(gp)        |     t9 = sym.imp.apr_file_mktemp;
    0x00000db0 lw a0, -0x7fd4(gp)        |     a0 = *(gp);
    0x00000db4 move a1, v0               |     a1 = v0;
    0x00000db8 sw v0, 0x4c(sp)           |     *(var_4ch) = v0;
    0x00000dbc jalr t9                   |     t9 ();
    0x00000dc0 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000dc4 bnez v0, 0x12fc           |         goto label_11;
                                         |     }
    0x00000dc8 lw v0, 0x34(sp)           |     v0 = *(var_34h);
    0x00000dcc lw v1, 0x3c(sp)           |     v1 = *(var_3ch);
    0x00000dd0 lw t9, -0x7f90(gp)        |     t9 = sym.imp.apr_file_open;
    0x00000dd4 lw v0, (v0)               |     v0 = *(v0);
    0x00000dd8 lw a1, 4(v1)              |     a1 = *((v1 + 1));
    0x00000ddc addiu a3, zero, 0xfff     |     a3 = 0xfff;
    0x00000de0 sw v0, 0x10(sp)           |     *(var_10h) = v0;
    0x00000de4 addiu a2, zero, 1         |     a2 = 1;
    0x00000de8 addiu a0, sp, 0x48        |     a0 = sp + 0x48;
    0x00000dec jalr t9                   |     t9 ();
    0x00000df0 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000df4 bnez v0, 0x12bc           |         goto label_12;
                                         |     }
    0x00000df8 lw v0, 0x3c(sp)           |     v0 = *(var_3ch);
    0x00000dfc lw t9, -0x7f4c(gp)        |     t9 = sym.imp.apr_cpystrn;
    0x00000e00 addiu s5, sp, 0x64        |     s5 = sp + 0x64;
    0x00000e04 lw a1, 0xc(v0)            |     a1 = *((v0 + 3));
    0x00000e08 addiu a2, zero, 0x100     |     a2 = 0x100;
    0x00000e0c move a0, s5               |     a0 = s5;
    0x00000e10 jalr t9                   |     t9 ();
    0x00000e14 addiu v0, sp, 0x164       |     v0 = sp + 0x164;
    0x00000e18 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000e1c move a0, v0               |     a0 = v0;
    0x00000e20 sw v0, 0x28(sp)           |     *(var_28h) = v0;
    0x00000e24 lw v0, 0x3c(sp)           |     v0 = *(var_3ch);
    0x00000e28 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.apr_cpystrn;
    0x00000e2c addiu a2, zero, 0x100     |     a2 = 0x100;
    0x00000e30 lw a1, 8(v0)              |     a1 = *((v0 + 2));
    0x00000e34 move s3, zero             |     s3 = 0;
    0x00000e38 jalr t9                   |     t9 ();
    0x00000e3c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000e40 addiu s4, sp, 0x464       |     s4 = sp + 0x464;
    0x00000e44 addiu s6, sp, 0x47        |     s6 = sp + 0x47;
    0x00000e48 lw s7, -0x7fd8(gp)        |     s7 = *((gp - 8182));
    0x00000e4c addiu v0, s7, 0x17f0      |     v0 = s7 + 0x17f0;
    0x00000e50 sw v0, 0x24(sp)           |     *(var_24h) = v0;
    0x00000e54 lw v0, -0x7fd8(gp)        |     v0 = *((gp - 8182));
    0x00000e58 sw v0, 0x2c(sp)           |     *(var_2ch) = v0;
    0x00000e5c lw v0, -0x7fd8(gp)        |     v0 = *((gp - 8182));
    0x00000e60 addiu v0, v0, 0x15c0      |     v0 += fcn.000015c0;
    0x00000e64 sw v0, 0x30(sp)           |     *(var_30h) = v0;
                                         | label_0:
    0x00000e68 lw s2, 0x48(sp)           |     s2 = *(var_48h);
                                         | label_2:
    0x00000e6c move fp, s4               |     fp = s4;
    0x00000e70 move s7, zero             |     s7 = 0;
    0x00000e74 addiu s0, zero, 0xa       |     s0 = 0xa;
    0x00000e78 addiu s1, zero, 0x2fe     |     s1 = 0x2fe;
                                         |     do {
    0x00000e7c lw t9, -0x7f40(gp)        |         t9 = sym.imp.apr_file_getc;
    0x00000e80 move a1, s2               |         a1 = s2;
    0x00000e84 move a0, s6               |         a0 = s6;
    0x00000e88 jalr t9                   |         t9 ();
    0x00000e8c lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         |         if (v0 != 0) {
    0x00000e90 bnez v0, 0xf94            |             goto label_13;
                                         |         }
    0x00000e94 lb v0, 0x47(sp)           |         v0 = *(var_47h);
    0x00000e98 addiu s7, s7, 1           |         s7++;
                                         |         if (v0 == s0) {
    0x00000e9c beq v0, s0, 0x103c        |             goto label_14;
                                         |         }
    0x00000ea0 sb v0, (fp)               |         *(fp) = v0;
    0x00000ea4 addiu fp, fp, 1           |         fp++;
    0x00000ea8 bne s7, s1, 0xe7c         |         
                                         |     } while (s7 != s1);
    0x00000eac sb zero, 0x762(sp)        |     *(var_762h) = 0;
    0x00000eb0 lb a0, 0x464(sp)          |     a0 = *(var_464h);
                                         |     if (s3 != 0) {
    0x00000eb4 bnez s3, 0x1054           |         goto label_15;
                                         |     }
                                         | label_1:
    0x00000eb8 addiu v0, zero, 0x23      |     v0 = 0x23;
    0x00000ebc lw s0, -0x7fd4(gp)        |     s0 = *(gp);
                                         |     if (a0 == v0) {
    0x00000ec0 beq a0, v0, 0x1118        |         goto label_16;
                                         |     }
    0x00000ec4 lw t9, -0x7f88(gp)        |     t9 = sym.imp.__strcpy_chk
                                         |     if (a0 == 0) {
    0x00000ec8 beqz a0, 0xe68            |         goto label_0;
                                         |     }
    0x00000ecc addiu s2, sp, 0x764       |     s2 = sp + 0x764;
    0x00000ed0 addiu a2, zero, 0x300     |     a2 = 0x300;
    0x00000ed4 move a1, s4               |     a1 = s4;
    0x00000ed8 move a0, s2               |     a0 = s2;
    0x00000edc jalr t9                   |     t9 ();
    0x00000ee0 addiu s0, sp, 0x264       |     s0 = sp + 0x264;
    0x00000ee4 lw t9, 0x24(sp)           |     t9 = *(var_24h);
    0x00000ee8 move a1, s2               |     a1 = s2;
    0x00000eec move a0, s0               |     a0 = s0;
    0x00000ef0 jalr t9                   |     t9 ();
    0x00000ef4 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000ef8 bnez v0, 0x1238           |         goto label_17;
                                         |     }
    0x00000efc addiu s1, sp, 0x364       |     s1 = sp + 0x364;
    0x00000f00 lw t9, 0x24(sp)           |     t9 = *(var_24h);
    0x00000f04 move a1, s2               |     a1 = s2;
    0x00000f08 move a0, s1               |     a0 = s1;
    0x00000f0c jalr t9                   |     t9 ();
    0x00000f10 move s3, v0               |     s3 = v0;
    0x00000f14 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000f18 bnez v0, 0x1238           |         goto label_17;
                                         |     }
    0x00000f1c lw t9, -0x7f30(gp)        |     t9 = sym.imp.strcmp;
    0x00000f20 move a1, s0               |     a1 = s0;
    0x00000f24 move a0, s5               |     a0 = s5;
    0x00000f28 jalr t9                   |     t9 ();
    0x00000f2c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000f30 lw s0, -0x7fd4(gp)        |     s0 = *(gp);
                                         |     if (v0 != 0) {
    0x00000f34 bnez v0, 0x10e4           |         goto label_18;
                                         |     }
    0x00000f38 lw t9, -0x7f30(gp)        |     t9 = sym.imp.strcmp;
    0x00000f3c lw a0, 0x28(sp)           |     a0 = *(var_28h);
    0x00000f40 move a1, s1               |     a1 = s1;
    0x00000f44 jalr t9                   |     t9 ();
    0x00000f48 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000f4c bnez v0, 0x10e4           |         goto label_18;
                                         |     }
    0x00000f50 lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x00000f54 lw s1, 0x28(sp)           |     s1 = *(var_28h);
    0x00000f58 lw t9, -0x7fa0(gp)        |     t9 = sym.imp.apr_file_printf;
    0x00000f5c lw a0, (v0)               |     a0 = *(v0);
    0x00000f60 lw v0, 0x2c(sp)           |     v0 = *(var_2ch);
    0x00000f64 move a3, s1               |     a3 = s1;
    0x00000f68 move a2, s5               |     a2 = s5;
    0x00000f6c addiu a1, v0, 0x1d70      |     a1 = v0 + str.Changing_password_for_user__s_in_realm__s_n;
    0x00000f70 jalr t9                   |     t9 ();
    0x00000f74 lw a2, (s0)               |     a2 = *(s0);
    0x00000f78 lw t9, 0x30(sp)           |     t9 = *(var_30h);
    0x00000f7c move a1, s1               |     a1 = s1;
    0x00000f80 move a0, s5               |     a0 = s5;
    0x00000f84 addiu s3, zero, 1         |     s3 = 1;
    0x00000f88 jalr t9                   |     t9 ();
    0x00000f8c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000f90 b 0xe68                   |     goto label_0;
                                         | label_13:
    0x00000f94 lb v0, 0x47(sp)           |     v0 = *(var_47h);
    0x00000f98 addiu a0, zero, 0xa       |     a0 = 0xa;
    0x00000f9c addiu v1, sp, 0xa68       |     v1 = sp + 0xa68;
                                         |     if (v0 == a0) {
    0x00000fa0 beq v0, a0, 0x1088        |         goto label_19;
                                         |     }
    0x00000fa4 sb zero, (fp)             |     *(fp) = 0;
                                         |     if (s3 == 0) {
    0x00000fa8 beqz s3, 0x1098           |         goto label_20;
                                         |     }
                                         | label_3:
    0x00000fac lw s0, -0x7fd4(gp)        |     s0 = *(gp);
                                         | label_4:
    0x00000fb0 lw t9, -0x7f70(gp)        |     t9 = sym.imp.apr_file_close;
    0x00000fb4 lw a0, 0x48(sp)           |     a0 = *(var_48h);
    0x00000fb8 jalr t9                   |     t9 ();
    0x00000fbc lw v0, 0x34(sp)           |     v0 = *(var_34h);
    0x00000fc0 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00000fc4 lw a0, 0x4c(sp)           |     a0 = *(var_4ch);
    0x00000fc8 lw a3, (v0)               |     a3 = *(v0);
    0x00000fcc lw v0, 0x3c(sp)           |     v0 = *(var_3ch);
    0x00000fd0 lw t9, -0x7fa4(gp)        |     t9 = sym.imp.apr_file_copy;
    0x00000fd4 addiu a2, zero, 0xfff     |     a2 = 0xfff;
    0x00000fd8 lw a1, 4(v0)              |     a1 = *((v0 + 1));
    0x00000fdc jalr t9                   |     t9 ();
    0x00000fe0 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00000fe4 bnez v0, 0x1120           |         goto label_21;
                                         |     }
                                         | label_6:
    0x00000fe8 lw t9, -0x7f70(gp)        |     t9 = sym.imp.apr_file_close;
    0x00000fec lw a0, (s0)               |     a0 = *(s0);
    0x00000ff0 jalr t9                   |     t9 ();
    0x00000ff4 lw v0, 0x38(sp)           |     v0 = *(var_38h);
    0x00000ff8 lw a0, 0xa64(sp)          |     a0 = *(var_a64h);
    0x00000ffc lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001000 lw v1, (v0)               |     v1 = *(v0);
    0x00001004 move v0, zero             |     v0 = 0;
                                         |     if (a0 != v1) {
    0x00001008 bne a0, v1, 0x126c        |         goto label_22;
                                         |     }
    0x0000100c lw ra, 0xa8c(sp)          |     ra = *(var_a8ch);
    0x00001010 lw fp, 0xa88(sp)          |     fp = *(var_a88h);
    0x00001014 lw s7, 0xa84(sp)          |     s7 = *(var_a84h);
    0x00001018 lw s6, 0xa80(sp)          |     s6 = *(var_a80h);
    0x0000101c lw s5, 0xa7c(sp)          |     s5 = *(var_a7ch);
    0x00001020 lw s4, 0xa78(sp)          |     s4 = *(var_a78h);
    0x00001024 lw s3, 0xa74(sp)          |     s3 = *(var_a74h);
    0x00001028 lw s2, 0xa70(sp)          |     s2 = *(var_a70h);
    0x0000102c lw s1, 0xa6c(sp)          |     s1 = *(var_a6ch);
    0x00001030 lw s0, 0xa68(sp)          |     s0 = *(var_a68h);
    0x00001034 addiu sp, sp, 0xa90       |     
    0x00001038 jr ra                     |     return v0;
                                         | label_14:
    0x0000103c addiu v0, sp, 0xa68       |     v0 = sp + 0xa68;
    0x00001040 addu v1, v0, s7           |     v1 = v0 + s7;
    0x00001044 sb s0, (fp)               |     *(fp) = s0;
    0x00001048 sb zero, -0x604(v1)       |     *((v1 - 1540)) = 0;
    0x0000104c lb a0, 0x464(sp)          |     a0 = *(var_464h);
                                         |     if (s3 == 0) {
    0x00001050 beqz s3, 0xeb8            |         goto label_1;
                                         |     }
                                         | label_15:
    0x00001054 lw s0, -0x7fd4(gp)        |     s0 = *(gp);
    0x00001058 lw s0, (s0)               |     s0 = *(s0);
                                         |     if (a0 == 0) {
    0x0000105c beqz a0, 0xe68            |         goto label_0;
                                         |     }
                                         | label_5:
    0x00001060 addiu s1, sp, 0x465       |     s1 = sp + 0x465;
                                         |     do {
    0x00001064 lw t9, -0x7f8c(gp)        |         t9 = sym.imp.apr_file_putc;
    0x00001068 addiu s1, s1, 1           |         s1++;
    0x0000106c move a1, s0               |         a1 = s0;
    0x00001070 jalr t9                   |         t9 ();
    0x00001074 lb a0, -1(s1)             |         a0 = *((s1 - 1));
    0x00001078 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x0000107c bnez a0, 0x1064           |         
                                         |     } while (a0 != 0);
    0x00001080 lw s2, 0x48(sp)           |     s2 = *(var_48h);
    0x00001084 b 0xe6c                   |     goto label_2;
                                         | label_19:
    0x00001088 addu v1, v1, s7           |     v1 += s7;
    0x0000108c sb v0, (fp)               |     *(fp) = v0;
    0x00001090 sb zero, -0x603(v1)       |     *((v1 - 1539)) = 0;
                                         |     if (s3 != 0) {
    0x00001094 bnez s3, 0xfac            |         goto label_3;
                                         |     }
                                         | label_20:
    0x00001098 lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x0000109c lw s1, 0x28(sp)           |     s1 = *(var_28h);
    0x000010a0 lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x000010a4 lw t9, -0x7fa0(gp)        |     t9 = sym.imp.apr_file_printf;
    0x000010a8 lw a0, (v0)               |     a0 = *(v0);
    0x000010ac move a3, s1               |     a3 = s1;
    0x000010b0 move a2, s5               |     a2 = s5;
    0x000010b4 lw s0, -0x7fd4(gp)        |     s0 = *(gp);
    0x000010b8 addiu a1, a1, 0x1d9c      |     a1 += str.Adding_user__s_in_realm__s_n;
    0x000010bc jalr t9                   |     t9 ();
    0x000010c0 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000010c4 lw a2, (s0)               |     a2 = *(s0);
    0x000010c8 move a1, s1               |     a1 = s1;
    0x000010cc lw t9, -0x7fd8(gp)        |     t9 = *((gp - 8182));
    0x000010d0 addiu t9, t9, 0x15c0      |     t9 += fcn.000015c0;
    0x000010d4 move a0, s5               |     a0 = s5;
    0x000010d8 bal 0x15c0                |     fcn_000015c0 ();
    0x000010dc lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000010e0 b 0xfb0                   |     goto label_4;
                                         | label_18:
    0x000010e4 lb a0, 0x464(sp)          |     a0 = *(var_464h);
    0x000010e8 addiu s1, sp, 0x465       |     s1 = sp + 0x465;
    0x000010ec lw s0, (s0)               |     s0 = *(s0);
                                         |     if (a0 == 0) {
    0x000010f0 beqz a0, 0xe68            |         goto label_0;
                                         |     }
                                         |     do {
    0x000010f4 lw t9, -0x7f8c(gp)        |         t9 = sym.imp.apr_file_putc;
    0x000010f8 addiu s1, s1, 1           |         s1++;
    0x000010fc move a1, s0               |         a1 = s0;
    0x00001100 jalr t9                   |         t9 ();
    0x00001104 lb a0, -1(s1)             |         a0 = *((s1 - 1));
    0x00001108 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x0000110c bnez a0, 0x10f4           |         
                                         |     } while (a0 != 0);
    0x00001110 lw s2, 0x48(sp)           |     s2 = *(var_48h);
    0x00001114 b 0xe6c                   |     goto label_2;
                                         | label_16:
    0x00001118 lw s0, (s0)               |     s0 = *(s0);
    0x0000111c b 0x1060                  |     goto label_5;
                                         | label_21:
    0x00001120 lw v0, 0x3c(sp)           |     v0 = *(var_3ch);
    0x00001124 lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x00001128 lw t9, -0x7fa0(gp)        |     t9 = sym.imp.apr_file_printf;
    0x0000112c lw a3, 4(v0)              |     a3 = *((v0 + 1));
    0x00001130 lw a2, (v0)               |     a2 = *(v0);
    0x00001134 lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x00001138 addiu a1, a1, 0x1db8      |     a1 += str._s:_unable_to_update_file__s_n;
    0x0000113c lw a0, (v0)               |     a0 = *(v0);
    0x00001140 jalr t9                   |     t9 ();
    0x00001144 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001148 b 0xfe8                   |     goto label_6;
                                         | label_8:
    0x0000114c lw s0, 0x3c(sp)           |     s0 = *(var_3ch);
    0x00001150 lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x00001154 lw t9, -0x7f30(gp)        |     t9 = sym.imp.strcmp;
    0x00001158 lw a0, 4(s0)              |     a0 = *((s0 + 1));
    0x0000115c addiu a1, a1, 0x1c24      |     a1 += 0x1c24;
    0x00001160 jalr t9                   |     t9 ();
    0x00001164 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00001168 bnez v0, 0x12ac           |         goto label_9;
                                         |     }
    0x0000116c lw v0, 0x34(sp)           |     v0 = *(var_34h);
    0x00001170 lw t9, -0x7f90(gp)        |     t9 = sym.imp.apr_file_open;
    0x00001174 lw a1, 8(s0)              |     a1 = *((s0 + 2));
    0x00001178 lw v0, (v0)               |     v0 = *(v0);
    0x0000117c addiu a3, zero, 0xfff     |     a3 = 0xfff;
    0x00001180 sw v0, 0x10(sp)           |     *(var_10h) = v0;
    0x00001184 addiu a2, zero, 6         |     a2 = 6;
    0x00001188 addiu a0, sp, 0x48        |     a0 = sp + 0x48;
    0x0000118c jalr t9                   |     t9 ();
    0x00001190 sw v0, 0x4c(sp)           |     *(var_4ch) = v0;
    0x00001194 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x00001198 bnez v0, 0x1318           |         goto label_23;
                                         |     }
    0x0000119c lw v0, 0x3c(sp)           |     v0 = *(var_3ch);
    0x000011a0 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.apr_cpystrn;
    0x000011a4 addiu s0, sp, 0x64        |     s0 = sp + 0x64;
    0x000011a8 lw a1, 0x10(v0)           |     a1 = *((v0 + 4));
    0x000011ac addiu a2, zero, 0x100     |     a2 = 0x100;
    0x000011b0 move a0, s0               |     a0 = s0;
    0x000011b4 jalr t9                   |     t9 ();
    0x000011b8 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000011bc lw v0, 0x3c(sp)           |     v0 = *(var_3ch);
    0x000011c0 addiu s1, sp, 0x164       |     s1 = sp + 0x164;
    0x000011c4 lw t9, -0x7f4c(gp)        |     t9 = sym.imp.apr_cpystrn;
    0x000011c8 lw a1, 0xc(v0)            |     a1 = *((v0 + 3));
    0x000011cc addiu a2, zero, 0x100     |     a2 = 0x100;
    0x000011d0 move a0, s1               |     a0 = s1;
    0x000011d4 jalr t9                   |     t9 ();
    0x000011d8 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x000011dc move a3, s1               |     a3 = s1;
    0x000011e0 move a2, s0               |     a2 = s0;
    0x000011e4 lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x000011e8 lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x000011ec lw t9, -0x7fa0(gp)        |     t9 = sym.imp.apr_file_printf;
    0x000011f0 lw a0, (v0)               |     a0 = *(v0);
    0x000011f4 addiu a1, a1, 0x1c58      |     a1 += str.Adding_password_for__s_in_realm__s._n;
    0x000011f8 jalr t9                   |     t9 ();
    0x000011fc lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001200 lw a2, 0x48(sp)           |     a2 = *(var_48h);
    0x00001204 move a1, s1               |     a1 = s1;
    0x00001208 lw t9, -0x7fd8(gp)        |     t9 = *((gp - 8182));
    0x0000120c addiu t9, t9, 0x15c0      |     t9 += fcn.000015c0;
    0x00001210 move a0, s0               |     a0 = s0;
    0x00001214 bal 0x15c0                |     fcn_000015c0 ();
    0x00001218 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000121c lw t9, -0x7f70(gp)        |     t9 = sym.imp.apr_file_close;
    0x00001220 lw a0, 0x48(sp)           |     a0 = *(var_48h);
    0x00001224 jalr t9                   |     t9 ();
    0x00001228 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x0000122c lw t9, -0x7f6c(gp)        |     t9 = sym.imp.exit;
    0x00001230 move a0, zero             |     a0 = 0;
    0x00001234 jalr t9                   |     t9 ();
                                         | label_17:
    0x00001238 lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x0000123c lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x00001240 lw t9, -0x7fa0(gp)        |     t9 = sym.imp.apr_file_printf;
    0x00001244 lw a0, (v0)               |     a0 = *(v0);
    0x00001248 move a3, s4               |     a3 = s4;
    0x0000124c addiu a2, zero, 0xff      |     a2 = 0xff;
    0x00001250 addiu a1, a1, 0x1d1c      |     a1 += str.The_following_line_contains_a_string_longer_than_the_allowed_maximum_size___i_:__s_n;
    0x00001254 jalr t9                   |     t9 ();
    0x00001258 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     do {
    0x0000125c lw t9, -0x7fd8(gp)        |         t9 = *((gp - 8182));
    0x00001260 addiu t9, t9, 0x151c      |         t9 += fcn.0000151c;
    0x00001264 addiu a0, zero, 1         |         a0 = 1;
    0x00001268 bal 0x151c                |         fcn_0000151c ();
                                         | label_22:
    0x0000126c lw t9, -0x7f60(gp)        |         t9 = sym.imp.__stack_chk_fail;
    0x00001270 jalr t9                   |         t9 ();
    0x00001274 nop                       |         
                                         | label_10:
    0x00001278 lw v0, -0x7fdc(gp)        |         v0 = *(gp);
    0x0000127c lw a1, -0x7fd8(gp)        |         a1 = *((gp - 8182));
    0x00001280 lw t9, -0x7fa0(gp)        |         t9 = sym.imp.apr_file_printf;
    0x00001284 lw a0, (v0)               |         a0 = *(v0);
    0x00001288 lw v0, 0x3c(sp)           |         v0 = *(var_3ch);
    0x0000128c addiu a1, a1, 0x1c80      |         a1 += str._s:_could_not_determine_temp_dir_n;
    0x00001290 lw a2, (v0)               |         a2 = *(v0);
                                         | label_7:
    0x00001294 jalr t9                   |         t9 ();
    0x00001298 nop                       |         
    0x0000129c lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012a0 lw t9, -0x7f6c(gp)        |         t9 = sym.imp.exit;
    0x000012a4 addiu a0, zero, 1         |         a0 = 1;
    0x000012a8 jalr t9                   |         t9 ();
                                         | label_9:
    0x000012ac lw t9, -0x7fd8(gp)        |         t9 = *((gp - 8182));
    0x000012b0 addiu t9, t9, 0x14c0      |         t9 += fcn.000014c0;
    0x000012b4 bal 0x14c0                |         fcn_000014c0 ();
    0x000012b8 nop                       |         
                                         | label_12:
    0x000012bc lw s0, -0x7fdc(gp)        |         s0 = *(gp);
    0x000012c0 lw v0, 0x3c(sp)           |         v0 = *(var_3ch);
    0x000012c4 lw a1, -0x7fd8(gp)        |         a1 = *((gp - 8182));
    0x000012c8 lw t9, -0x7fa0(gp)        |         t9 = sym.imp.apr_file_printf;
    0x000012cc lw a2, 4(v0)              |         a2 = *((v0 + 1));
    0x000012d0 lw a0, (s0)               |         a0 = *(s0);
    0x000012d4 addiu a1, a1, 0x1ccc      |         a1 += str.Could_not_open_passwd_file__s_for_reading._n;
    0x000012d8 jalr t9                   |         t9 ();
    0x000012dc lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012e0 lw a0, (s0)               |         a0 = *(s0);
    0x000012e4 lw a1, -0x7fd8(gp)        |         a1 = *((gp - 8182));
    0x000012e8 lw t9, -0x7fa0(gp)        |         t9 = sym.imp.apr_file_printf;
    0x000012ec addiu a1, a1, 0x1cf8      |         a1 += str.Use__c_option_to_create_new_one._n;
    0x000012f0 jalr t9                   |         t9 ();
    0x000012f4 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x000012f8 b 0x125c                  |         
                                         |     } while (1);
                                         | label_11:
    0x000012fc lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x00001300 lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x00001304 lw t9, -0x7fa0(gp)        |     t9 = sym.imp.apr_file_printf;
    0x00001308 lw a0, (v0)               |     a0 = *(v0);
    0x0000130c lw a2, 0x4c(sp)           |     a2 = *(var_4ch);
    0x00001310 addiu a1, a1, 0x1cac      |     a1 += str.Could_not_open_temp_file__s._n;
    0x00001314 b 0x1294                  |     goto label_7;
                                         | label_23:
    0x00001318 lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x0000131c lw a1, -0x7fd8(gp)        |     a1 = *((gp - 8182));
    0x00001320 lw t9, -0x7fa0(gp)        |     t9 = sym.imp.apr_file_printf;
    0x00001324 lw a0, (v0)               |     a0 = *(v0);
    0x00001328 lw v0, 0x3c(sp)           |     v0 = *(var_3ch);
    0x0000132c addiu a3, sp, 0x4c        |     a3 = sp + 0x4c;
    0x00001330 addiu a1, a1, 0x1c28      |     a1 += str.Could_not_open_passwd_file__s_for_writing:__pm_n;
    0x00001334 lw a2, 8(v0)              |     a2 = *((v0 + 2));
    0x00001338 jalr t9                   |     t9 ();
    0x0000133c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00001340 lw t9, -0x7f6c(gp)        |     t9 = sym.imp.exit;
    0x00001344 addiu a0, zero, 1         |     a0 = 1;
    0x00001348 jalr t9                   |     t9 ();
    0x0000134c nop                       |     
                                         | }

[*] Function strcpy used 2 times htdigest