[*] Binary protection state of debug-shell-wrapper
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function system tear down of debug-shell-wrapper
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/debug-shell-wrapper @ 0xaa0 */
| #include <stdint.h>
|
; (fcn) main () | int32_t main () {
| /* [13] -r-x section size 2032 named .text */
0x00000aa0 lui gp, 2 |
0x00000aa4 addiu gp, gp, -0x6a90 |
0x00000aa8 addu gp, gp, t9 | gp += t9;
0x00000aac lw v0, -0x7f6c(gp) | v0 = *((gp - 8155));
0x00000ab0 addiu sp, sp, -0xf8 |
0x00000ab4 lw v0, (v0) | v0 = *(v0);
0x00000ab8 sw s5, 0xe4(sp) | *(var_e4h) = s5;
0x00000abc sw s4, 0xe0(sp) | *(var_e0h) = s4;
0x00000ac0 sw s1, 0xd4(sp) | *(var_d4h) = s1;
0x00000ac4 lw s5, -0x7fdc(gp) | s5 = *((gp - 8183));
0x00000ac8 lw s1, -0x7fdc(gp) | s1 = *((gp - 8183));
0x00000acc lw s4, -0x7fdc(gp) | s4 = *((gp - 8183));
0x00000ad0 sw s6, 0xe8(sp) | *(var_e8h) = s6;
0x00000ad4 sw s3, 0xdc(sp) | *(var_dch) = s3;
0x00000ad8 sw s2, 0xd8(sp) | *(var_d8h) = s2;
0x00000adc lw s3, -0x7fdc(gp) | s3 = *((gp - 8183));
0x00000ae0 lw s2, -0x7fdc(gp) | s2 = *((gp - 8183));
0x00000ae4 lw s6, -0x7fdc(gp) | s6 = *((gp - 8183));
0x00000ae8 sw s7, 0xec(sp) | *(var_ech) = s7;
0x00000aec sw gp, 0x28(sp) | *(var_28h) = gp;
0x00000af0 sw ra, 0xf4(sp) | *(var_f4h) = ra;
0x00000af4 sw fp, 0xf0(sp) | *(var_f0h) = fp;
0x00000af8 sw s0, 0xd0(sp) | *(var_d0h) = s0;
0x00000afc sw v0, 0xcc(sp) | *(var_cch) = v0;
0x00000b00 addiu s7, sp, 0x38 | s7 = sp + 0x38;
0x00000b04 addiu s1, s1, 0xf5c | s1 += fcn.00000f5c;
0x00000b08 addiu s5, s5, 0x1580 | s5 += 0x1580;
0x00000b0c addiu s4, s4, 0x1584 | s4 += str.AddRootUser;
| label_1:
0x00000b10 addiu s0, zero, 0xa | s0 = 0xa;
| do {
0x00000b14 lw t9, -0x7f60(gp) | t9 = sym.imp.read;
| label_0:
0x00000b18 addiu a2, zero, 1 | a2 = 1;
0x00000b1c move a1, s7 | a1 = s7;
0x00000b20 move a0, zero | a0 = 0;
0x00000b24 jalr t9 | t9 ();
0x00000b28 addiu v1, zero, 1 | v1 = 1;
0x00000b2c lw gp, 0x28(sp) | gp = *(var_28h);
0x00000b30 bne v0, v1, 0xb14 |
| } while (v0 != v1);
0x00000b34 lb v0, 0x38(sp) | v0 = *(var_38h);
0x00000b38 lw t9, -0x7f60(gp) | t9 = sym.imp.read;
| if (v0 != s0) {
0x00000b3c bne v0, s0, 0xb18 | goto label_0;
| }
0x00000b40 lw t9, -0x7f68(gp) | t9 = sym.imp.getspnam;
0x00000b44 addiu a0, s2, 0x1490 | a0 = s2 + str.root;
0x00000b48 jalr t9 | t9 ();
0x00000b4c lw gp, 0x28(sp) | gp = *(var_28h);
| if (v0 == 0) {
0x00000b50 beqz v0, 0xcc0 | goto label_3;
| }
0x00000b54 lw v1, 4(v0) | v1 = *((v0 + 1));
0x00000b58 addiu a0, zero, 0x2a | a0 = 0x2a;
0x00000b5c lb v0, (v1) | v0 = *(v1);
0x00000b60 addiu a0, zero, 0x21 | a0 = 0x21;
| if (v0 == a0) {
0x00000b64 beq v0, a0, 0xb80 | goto label_4;
| }
| if (v0 == a0) {
0x00000b68 beql v0, a0, 0xb84 | goto label_5;
| }
0x00000b6c lb v0, 1(v1) | v0 = *((v1 + 1));
| label_2:
0x00000b70 lw t9, -0x7fdc(gp) | t9 = *((gp - 8183));
| do {
0x00000b74 addiu t9, t9, 0xf00 | t9 += fcn.00000f00;
0x00000b78 bal 0xf00 | fcn_00000f00 ();
0x00000b7c nop |
| label_4:
0x00000b80 lb v0, 1(v1) | v0 = *((v1 + 1));
| label_5:
0x00000b84 lw t9, -0x7fdc(gp) | t9 = *((gp - 8183));
0x00000b88 bnez v0, 0xb74 |
| } while (v0 != 0);
0x00000b8c lw t9, -0x7fac(gp) | t9 = sym.imp.__dprintf_chk;
0x00000b90 addiu a2, s3, 0x14b8 | a2 = s3 + str.Set_password_for_root_account:_;
0x00000b94 addiu a1, zero, 1 | a1 = 1;
0x00000b98 addiu a0, zero, 2 | a0 = 2;
0x00000b9c addiu s0, sp, 0x44 | s0 = sp + 0x44;
0x00000ba0 jalr t9 | t9 ();
0x00000ba4 move t9, s1 | t9 = s1;
0x00000ba8 move a0, s0 | a0 = s0;
0x00000bac bal 0xf5c | fcn_00000f5c ();
0x00000bb0 lw gp, 0x28(sp) | gp = *(var_28h);
| if (v0 == 0) {
0x00000bb4 beqz v0, 0xb10 | goto label_1;
| }
0x00000bb8 lb v0, 0x44(sp) | v0 = *(var_44h);
0x00000bbc lw t9, -0x7fac(gp) | t9 = sym.imp.__dprintf_chk;
| if (v0 == 0) {
0x00000bc0 beqz v0, 0xca4 | goto label_6;
| }
0x00000bc4 addiu a2, s6, 0x14f4 | a2 = s6 + str.Repeat_password:_;
0x00000bc8 addiu a1, zero, 1 | a1 = 1;
0x00000bcc addiu a0, zero, 2 | a0 = 2;
0x00000bd0 addiu fp, sp, 0x88 | fp = sp + 0x88;
0x00000bd4 jalr t9 | t9 ();
0x00000bd8 move t9, s1 | t9 = s1;
0x00000bdc move a0, fp | a0 = fp;
0x00000be0 bal 0xf5c | fcn_00000f5c ();
0x00000be4 lw gp, 0x28(sp) | gp = *(var_28h);
| if (v0 == 0) {
0x00000be8 beqz v0, 0xb10 | goto label_1;
| }
0x00000bec lw t9, -0x7f58(gp) | t9 = sym.imp.strcmp;
0x00000bf0 move a1, fp | a1 = fp;
0x00000bf4 move a0, s0 | a0 = s0;
0x00000bf8 jalr t9 | t9 ();
0x00000bfc lw gp, 0x28(sp) | gp = *(var_28h);
| if (v0 == 0) {
0x00000c00 bnez v0, 0xce0 |
0x00000c04 lw t9, -0x7f84(gp) | t9 = sym.imp.sd_bus_open_system
0x00000c08 addiu a0, sp, 0x30 | a0 = sp + 0x30;
0x00000c0c sw zero, 0x38(sp) | *(var_38h) = 0;
0x00000c10 sw zero, 0x3c(sp) | *(var_3ch) = 0;
0x00000c14 sw zero, 0x40(sp) | *(var_40h) = 0;
0x00000c18 jalr t9 | t9 ();
0x00000c1c lw gp, 0x28(sp) | gp = *(var_28h);
| if (v0 < 0) {
0x00000c20 bltz v0, 0xd00 | goto label_7;
| }
0x00000c24 lw a3, -0x7fdc(gp) | a3 = *((gp - 8183));
0x00000c28 lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00000c2c lw t9, -0x7f74(gp) | t9 = sym.imp.sd_bus_call_method;
0x00000c30 addiu a3, a3, 0x1548 | a3 += str.com.axis.PolicyKitSystem;
0x00000c34 addiu v0, sp, 0x34 | v0 = sp + 0x34;
0x00000c38 lw a0, 0x30(sp) | a0 = *(var_30h);
0x00000c3c sw s0, 0x20(sp) | *(var_20h) = s0;
0x00000c40 sw s5, 0x1c(sp) | *(var_1ch) = s5;
0x00000c44 sw v0, 0x18(sp) | *(var_18h) = v0;
0x00000c48 sw s7, 0x14(sp) | *(var_14h) = s7;
0x00000c4c sw s4, 0x10(sp) | *(var_10h) = s4;
0x00000c50 addiu a2, a2, 0x1564 | a2 += str._com_axis_PolicyKitSystem;
0x00000c54 move a1, a3 | a1 = a3;
0x00000c58 jalr t9 | t9 ();
0x00000c5c lw gp, 0x28(sp) | gp = *(var_28h);
| if (v0 < 0) {
0x00000c60 bltz v0, 0xd34 | goto label_8;
| }
0x00000c64 lw t9, -0x7fa0(gp) | t9 = sym.imp.sd_bus_message_unref;
0x00000c68 lw a0, 0x34(sp) | a0 = *(var_34h);
0x00000c6c jalr t9 | t9 ();
0x00000c70 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000c74 lw t9, -0x7fa8(gp) | t9 = sym.imp.sd_bus_unref;
0x00000c78 lw a0, 0x30(sp) | a0 = *(var_30h);
0x00000c7c jalr t9 | t9 ();
0x00000c80 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000c84 addiu a1, zero, 1 | a1 = 1;
0x00000c88 addiu a0, zero, 2 | a0 = 2;
0x00000c8c lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00000c90 lw t9, -0x7fac(gp) | t9 = sym.imp.__dprintf_chk;
0x00000c94 addiu a2, a2, 0x1590 | a2 += str.Password_for_root_has_been_set._n;
0x00000c98 jalr t9 | t9 ();
0x00000c9c lw gp, 0x28(sp) | gp = *(var_28h);
0x00000ca0 b 0xb70 | goto label_2;
| label_6:
0x00000ca4 lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00000ca8 addiu a1, zero, 1 | a1 = 1;
0x00000cac addiu a2, a2, 0x14d8 | a2 += str.Password_cant_be_empty._n;
0x00000cb0 addiu a0, zero, 2 | a0 = 2;
0x00000cb4 jalr t9 | t9 ();
0x00000cb8 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000cbc b 0xb10 | goto label_1;
| label_3:
0x00000cc0 lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00000cc4 lw t9, -0x7fac(gp) | t9 = sym.imp.__dprintf_chk;
0x00000cc8 addiu a2, a2, 0x1498 | a2 += str.Could_not_read__etc_shadow:__m_n;
0x00000ccc addiu a1, zero, 1 | a1 = 1;
0x00000cd0 addiu a0, zero, 2 | a0 = 2;
0x00000cd4 jalr t9 | t9 ();
0x00000cd8 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000cdc b 0xb70 | goto label_2;
| }
0x00000ce0 lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00000ce4 lw t9, -0x7fac(gp) | t9 = sym.imp.__dprintf_chk;
0x00000ce8 addiu a2, a2, 0x1508 | a2 += str.Passwords_dont_match._n;
0x00000cec addiu a1, zero, 1 | a1 = 1;
0x00000cf0 addiu a0, zero, 2 | a0 = 2;
0x00000cf4 jalr t9 | t9 ();
0x00000cf8 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000cfc b 0xb10 | goto label_1;
| label_7:
0x00000d00 lw t9, -0x7f80(gp) | t9 = sym.imp.strerror;
0x00000d04 negu a0, v0 | __asm ("negu a0, v0");
0x00000d08 jalr t9 | t9 ();
0x00000d0c lw gp, 0x28(sp) | gp = *(var_28h);
0x00000d10 move a3, v0 | a3 = v0;
0x00000d14 addiu a1, zero, 1 | a1 = 1;
0x00000d18 lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00000d1c lw t9, -0x7fac(gp) | t9 = sym.imp.__dprintf_chk;
0x00000d20 addiu a2, a2, 0x1520 | a2 += str.Failed_to_connect_to_system_bus:__s_n
0x00000d24 addiu a0, zero, 2 | a0 = 2;
0x00000d28 jalr t9 | t9 ();
0x00000d2c lw gp, 0x28(sp) | gp = *(var_28h);
0x00000d30 b 0xb10 | goto label_1;
| label_8:
0x00000d34 lw a2, -0x7fdc(gp) | a2 = *((gp - 8183));
0x00000d38 lw v0, 0x38(sp) | v0 = *(var_38h);
0x00000d3c lw a3, 0x3c(sp) | a3 = *(var_3ch);
0x00000d40 lw t9, -0x7fac(gp) | t9 = sym.imp.__dprintf_chk;
0x00000d44 addiu a2, a2, 0x15b4 | a2 += str.Failed_to_add_root_user:__s___s__n;
0x00000d48 addiu a1, zero, 1 | a1 = 1;
0x00000d4c addiu a0, zero, 2 | a0 = 2;
0x00000d50 sw v0, 0x10(sp) | *(var_10h) = v0;
0x00000d54 jalr t9 | t9 ();
0x00000d58 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000d5c lw t9, -0x7f90(gp) | t9 = sym.imp.sd_bus_error_free;
0x00000d60 move a0, s7 | a0 = s7;
0x00000d64 jalr t9 | t9 ();
0x00000d68 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000d6c lw t9, -0x7fa0(gp) | t9 = sym.imp.sd_bus_message_unref;
0x00000d70 lw a0, 0x34(sp) | a0 = *(var_34h);
0x00000d74 jalr t9 | t9 ();
0x00000d78 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000d7c lw t9, -0x7fa8(gp) | t9 = sym.imp.sd_bus_unref;
0x00000d80 lw a0, 0x30(sp) | a0 = *(var_30h);
0x00000d84 jalr t9 | t9 ();
0x00000d88 lw gp, 0x28(sp) | gp = *(var_28h);
0x00000d8c b 0xb10 | goto label_1;
| }
[*] Function system used 3 times debug-shell-wrapper
