[*] Binary protection state of libmbedx509.so
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[*] Function strcat tear down of libmbedx509.so
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/unblob_extracted/firmware_extract/11108416-13869836.lzma_extract/lzma.uncompressed_extract/3761304-11775640.cpio_portable_ascii_extract/usr/lib/libmbedx509.so @ 0x2d50 */
| #include <stdint.h>
|
; (fcn) fcn.00002d50 () | void fcn_00002d50 () {
0x00002d50 lui gp, 3 |
0x00002d54 addiu gp, gp, -0x28e0 |
0x00002d58 addu gp, gp, t9 | gp += t9;
0x00002d5c addiu sp, sp, -0x30 |
0x00002d60 sw s3, 0x28(sp) | *(var_28h) = s3;
0x00002d64 lw s3, -0x7fe4(gp) | s3 = *((gp - 8185));
0x00002d68 sw gp, 0x10(sp) | *(var_10h) = gp;
0x00002d6c sw ra, 0x2c(sp) | *(var_2ch) = ra;
0x00002d70 lbu v0, -0x7930(s3) | v0 = *((s3 - 31024));
0x00002d74 sw s2, 0x24(sp) | *(var_24h) = s2;
0x00002d78 sw s1, 0x20(sp) | *(var_20h) = s1;
0x00002d7c sw s0, 0x1c(sp) | *(var_1ch) = s0;
0x00002d80 lw v0, -0x7e44(gp) | v0 = *((gp - 8081));
| if (v0 != 0) {
0x00002d84 bnez v0, 0x2e3c | goto label_1;
| }
0x00002d88 lw v0, -0x7fe0(gp) | v0 = *((gp - 8184));
| if (v0 != 0) {
0x00002d8c beqz v0, 0x2da0 |
0x00002d90 lw t9, -0x7e44(gp) | t9 = *((gp - 8081));
0x00002d94 lw a0, (v0) | a0 = *(v0);
0x00002d98 jalr t9 | t9 ();
0x00002d9c lw gp, 0x10(sp) | gp = *(var_10h);
| }
0x00002da0 lw s2, -0x7fe4(gp) | s2 = *((gp - 8185));
0x00002da4 lw s0, -0x7fe4(gp) | s0 = *((gp - 8185));
0x00002da8 lw s1, -0x7fdc(gp) | s1 = *((gp - 8183));
0x00002dac addiu s2, s2, -0x7e34 | s2 += -0x7e34;
0x00002db0 lw v0, -0x792c(s0) | v0 = *((s0 - 7755));
0x00002db4 subu s1, s1, s2 | __asm ("subu s1, s1, s2");
0x00002db8 sra s1, s1, 2 | s1 >>= 2;
0x00002dbc addiu s1, s1, -1 | s1 += -1;
0x00002dc0 sltu v1, v0, s1 | v1 = (v0 < s1) ? 1 : 0;
0x00002dc4 lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
| if (v1 == 0) {
0x00002dc8 beqz v1, 0x2df8 | goto label_2;
| }
| do {
0x00002dcc addiu v0, v0, 1 | v0++;
0x00002dd0 sll v1, v0, 2 | v1 = v0 << 2;
0x00002dd4 addu v1, s2, v1 | v1 = s2 + v1;
0x00002dd8 lw t9, (v1) | t9 = *(v1);
0x00002ddc sw v0, -0x792c(s0) | *((s0 - 7755)) = v0;
0x00002de0 jalr t9 | t9 ();
0x00002de4 lw v0, -0x792c(s0) | v0 = *((s0 - 7755));
0x00002de8 sltu v1, v0, s1 | v1 = (v0 < s1) ? 1 : 0;
0x00002dec lw gp, 0x10(sp) | gp = *(var_10h);
0x00002df0 bnez v1, 0x2dcc |
| } while (v1 != 0);
0x00002df4 lw t9, -0x7fd8(gp) | t9 = *((gp - 8182));
| label_2:
0x00002df8 addiu t9, t9, 0x2cc0 | t9 += entry0;
0x00002dfc bal 0x2cc0 | entry0 ();
0x00002e00 nop |
0x00002e04 lw gp, 0x10(sp) | gp = *(var_10h);
0x00002e08 lw v0, -0x7f00(gp) | v0 = *((gp - 8128));
0x00002e0c lw a0, -0x7f2c(gp) | a0 = *((gp - 8139));
| if (v0 == 0) {
0x00002e10 beqz v0, 0x2e58 | goto label_3;
| }
0x00002e14 lw v0, -0x7ec8(gp) | v0 = *((gp - 8114));
| if (a0 == 0) {
0x00002e18 beqz a0, 0x2e5c | goto label_4;
| }
0x00002e1c lb v0, (a0) | v0 = *(a0);
0x00002e20 slti v0, v0, 2 | v0 = (v0 < 2) ? 1 : 0;
0x00002e24 lw t9, -0x7ec8(gp) | t9 = *((gp - 8114));
| if (v0 != 0) {
0x00002e28 bnez v0, 0x2e58 | goto label_3;
| }
0x00002e2c jalr t9 | t9 ();
0x00002e30 nop |
| do {
0x00002e34 addiu v0, zero, 1 | v0 = 1;
| label_0:
0x00002e38 sb v0, -0x7930(s3) | *((s3 - 31024)) = v0;
| label_1:
0x00002e3c lw ra, 0x2c(sp) | ra = *(var_2ch);
0x00002e40 lw s3, 0x28(sp) | s3 = *(var_28h);
0x00002e44 lw s2, 0x24(sp) | s2 = *(var_24h);
0x00002e48 lw s1, 0x20(sp) | s1 = *(var_20h);
0x00002e4c lw s0, 0x1c(sp) | s0 = *(var_1ch);
0x00002e50 addiu sp, sp, 0x30 |
0x00002e54 jr ra | return v0;
| label_3:
0x00002e58 lw v0, -0x7ec8(gp) | v0 = *((gp - 8114));
| label_4:
0x00002e5c lw a0, -0x7fd4(gp) | a0 = *((gp - 8181));
0x00002e60 beqz v0, 0x2e34 |
| } while (v0 == 0);
0x00002e64 lw t9, -0x7ec8(gp) | t9 = *((gp - 8114));
0x00002e68 addiu a0, a0, -0x7e40 | a0 += -0x7e40;
0x00002e6c jalr t9 | t9 ();
0x00002e70 addiu v0, zero, 1 | v0 = 1;
0x00002e74 b 0x2e38 | goto label_0;
| }
[*] Function strcat used 1 times libmbedx509.so
