[*] Binary protection state of updateleases
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of updateleases
b 0x401370
nop
lw a2, 0xd4(sp)
lw t9, -sym.imp.sprintf(gp)
srl a0, a2, 0x18
sll v1, a2, 0x18
srl v0, a2, 8
or v1, v1, a0
andi v0, v0, 0xff00
andi a2, a2, 0xff00
or v1, v1, v0
sll a2, a2, 8
or a2, v1, a2
move a0, s0
jalr t9
move a1, s7
lw gp, 0x20(sp)
move a2, s3
lw t9, -sym.xmldbc_set(gp)
move a3, s0
move a0, zero
jalr t9
move a1, zero
lw gp, 0x20(sp)
addiu s0, sp, 0x41c
lw t9, -sym.imp.strcpy(gp)
move a0, s0
jalr t9
addiu a1, sp, 0xdc
lw gp, 0x20(sp)
move a0, s0
lw v0, -0x7f98(gp)
move v1, zero
lw a2, (v0)
b 0x4013a8
addiu a3, zero, 0x2d
addiu v1, v1, 1
addu v0, a0, v1
lb a1, (v0)
nop
sll v0, a1, 1
addu v0, a2, v0
lhu v0, (v0)
nop
andi v0, v0, 0x800
bnez v0, 0x4013a4
nop
beq a1, a3, 0x4013a8
addiu v1, v1, 1
addiu v1, v1, -1
bnez v1, 0x401400
addu v0, sp, v1
lw t9, -sym.imp.strcpy(gp)
lui a1, 0x40
jalr t9
addiu a1, a1, 0x2a34
lw gp, 0x20(sp)
b 0x401404
nop
sb zero, 0x41c(v0)
lw t9, -sym.imp.sprintf(gp)
addiu s0, sp, 0x31c
addiu s1, sp, 0x21c
lw a3, (s2)
lui a1, 0x40
move a0, s0
addiu a1, a1, 0x2a40
jalr t9
move a2, s1
lw gp, 0x20(sp)
move a0, zero
lw t9, -sym.xmldbc_set(gp)
move a1, zero
[*] Function strcpy used 2 times updateleases