[*] Binary protection state of libuClibc-0.9.30.1.so

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	Full RELRO     No Canary found   NX disabled  DSO          No RPATH     No RUNPATH   No Symbols

[*] Function strcat tear down of libuClibc-0.9.30.1.so

sltu v0, a0, s0

move a2, s0

move a1, s7

lw a3, 0x70(fp)

movz v1, s3, s1

beqz v0, 0x126c4

lw a0, 0x20(fp)

lw a0, (a0)

beqz a0, 0x128e4

move s0, s7

b 0x1275c

sw a0, 0x20(fp)

lw t9, -0x7fe0(gp)

lw a2, 0x6c(fp)

lw a3, 0x70(fp)

move a0, s2

move a1, s7

addiu t9, t9, 0x291c

jalr t9

sw s4, 0x10(sp)

beqz v0, 0x128dc

lw gp, 0x18(fp)

addiu v0, zero, -5

and s1, s4, v0

lw v0, -0x7fe0(gp)

lw s5, -sym.strcat(gp)

addiu s3, v0, 0x291c

andi s0, s4, 1

lw a0, 0x20(fp)

move a1, s2

move t9, s5

jalr t9

addiu a0, a0, 4

move a0, v0

move v0, s4

movz v0, s1, s0

lw a2, 0x6c(fp)

lw a3, 0x70(fp)

move a1, s7

move t9, s3

jalr t9

sw v0, 0x10(sp)

beqz v0, 0x128dc

lw gp, 0x18(fp)

lw v0, 0x20(fp)

lw v0, (v0)

--

addiu a1, fp, 0x24

addiu a2, sp, 0x18

jalr t9

sw v0, 0x10(sp)

bnez v0, 0x3cd10

lw gp, 0x18(fp)

lw v0, 0x20(fp)

beqz v0, 0x3cd10

lw t9, -sym.strlen(gp)

jalr t9

lw a0, 0x14(v0)

lw gp, 0x18(fp)

lw t9, -sym.malloc(gp)

jalr t9

addiu a0, v0, 9

move s0, v0

lw gp, 0x18(fp)

lw v0, 0x20(fp)

lw t9, -sym.strcpy(gp)

lw a1, 0x14(v0)

jalr t9

move a0, s0

lw gp, 0x18(fp)

move a0, s0

lw a1, -0x7fac(gp)

lw t9, -sym.strcat(gp)

jalr t9

addiu a1, a1, -0x40a0

lw gp, 0x18(fp)

lw t9, -sym.geteuid(gp)

jalr t9

nop

lw v1, 0x20(fp)

lw gp, 0x18(fp)

lw a0, 8(v1)

lw t9, -sym.seteuid(gp)

jalr t9

move s3, v0

lw gp, 0x18(fp)

lw v0, 0x20(fp)

lw t9, -0x7b20(gp)

lw a1, 8(v0)

addiu t9, t9, -0x361c

jalr t9

move a0, s0

lw gp, 0x18(fp)

--

bne s0, v0, 0x3f4e8

lw gp, 0x10(fp)

lw a0, -0x7fac(gp)

lw t9, -sym.getenv(gp)

jalr t9

addiu a0, a0, -0x3f10

lw gp, 0x10(fp)

beqz v0, 0x3f4e8

move s0, v0

lw t9, -sym.strlen(gp)

jalr t9

move a0, v0

addiu v0, v0, 0x16

srl v0, v0, 3

lw gp, 0x10(fp)

sll v0, v0, 3

subu sp, sp, v0

addiu s1, sp, 0x10

lw t9, -sym.strcpy(gp)

move a1, s0

jalr t9

move a0, s1

lw gp, 0x10(fp)

move a0, s1

lw a1, -0x7fac(gp)

lw t9, -sym.strcat(gp)

jalr t9

addiu a1, a1, -0x3f08

lw gp, 0x10(fp)

move a0, s1

lw a1, -0x7fac(gp)

lw t9, -sym.fopen(gp)

jalr t9

addiu a1, a1, -0x40f0

lw gp, 0x10(fp)

move a0, v0

lw v0, -0x7f68(gp)

bnez a0, 0x3f160

sw a0, 0x2190(v0)

lw t9, -sym.__errno_location(gp)

jalr t9

nop

lw v1, (v0)

addiu v0, zero, 2

lw gp, 0x10(fp)

beq v1, v0, 0x3f4ec

--

bnez v0, 0x53d78

lw gp, 0x18(sp)

lw a2, 0x20(sp)

addiu s0, sp, 0x2f

addiu v0, zero, -0xa

lw t9, -0x7d74(gp)

move a0, s0

sra a3, a2, 0x1f

sw v0, 0x10(sp)

jalr t9

sw zero, 0x14(sp)

subu s0, s0, v0

addiu s0, s0, 0xa

sltu s0, s5, s0

move s2, v0

lw gp, 0x18(sp)

bnez s0, 0x53d7c

addiu v0, zero, 0x22

lw a1, -0x7fac(gp)

lw t9, -sym.strcpy(gp)

addiu a1, a1, -0x3270

jalr t9

move a0, s4

lw gp, 0x18(sp)

move a0, s4

lw t9, -sym.strcat(gp)

jalr t9

move a1, s2

lw gp, 0x18(sp)

move v0, zero

b 0x53d80

sw s3, (s1)

addiu v0, zero, 0x19

sw v0, (s1)

lw ra, 0x4c(sp)

lw s5, 0x48(sp)

lw s4, 0x44(sp)

lw s3, 0x40(sp)

lw s2, 0x3c(sp)

lw s1, 0x38(sp)

lw s0, 0x34(sp)

jr ra

addiu sp, sp, 0x50

lui gp, 2

addiu gp, gp, 0x273c

addu gp, gp, t9

[*] Function strcat used 4 times libuClibc-0.9.30.1.so