[*] Binary protection state of updatewifistats
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of updatewifistats
sltiu v0, v1, 0x10
beqz v0, 0x4023bc
lui v0, 0x41
sll v1, v1, 2
b 0x402394
addiu v0, v0, 0x7490
bne v1, v0, 0x4023bc
nop
lw v1, 0x20(s1)
nop
sltiu v0, v1, 0x10
beqz v0, 0x4023bc
lui v0, 0x41
sll v1, v1, 2
addiu v0, v0, 0x74d4
addu v1, v1, v0
lw t9, -sym.imp.snprintf(gp)
lw a3, (v1)
lui a2, 0x40
move a0, s3
addiu a2, a2, 0x6d98
jalr t9
addiu a1, zero, 0x80
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.strcpy(gp)
move a0, s4
jalr t9
addiu a1, sp, 0x18
lw gp, 0x10(sp)
move a0, s5
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a1, sp, 0x98
lw ra, 0x134(sp)
lw gp, 0x10(sp)
lw s5, 0x130(sp)
lw s4, 0x12c(sp)
lw s3, 0x128(sp)
lw s2, 0x124(sp)
lw s1, 0x120(sp)
lw s0, 0x11c(sp)
jr ra
addiu sp, sp, 0x138
lui gp, 0x42
addiu sp, sp, -0x6098
addiu gp, gp, -0xaa0
sw ra, 0x6094(sp)
sw fp, 0x6090(sp)
sw s7, 0x608c(sp)
sw s6, 0x6088(sp)
--
jr ra
addiu sp, sp, 0x20
lui gp, 0x42
andi a1, a1, 0xf00
addiu v0, zero, 0x300
addiu gp, gp, -0xaa0
beq a1, v0, 0x404264
move v1, a0
slti v0, a1, 0x301
beqz v0, 0x404230
addiu v0, zero, 0x400
addiu v0, zero, 0x100
beq a1, v0, 0x404248
addiu v0, zero, 0x200
bne a1, v0, 0x404290
lui a1, 0x40
b 0x404258
nop
beq a1, v0, 0x404274
addiu v0, zero, 0x800
bne a1, v0, 0x404290
lui a1, 0x40
b 0x404284
nop
lui a1, 0x40
lw t9, -sym.imp.strcpy(gp)
b 0x4042a0
addiu a1, a1, 0x6b20
lw t9, -sym.imp.strcpy(gp)
b 0x4042a0
addiu a1, a1, 0x6b3c
lui a1, 0x40
lw t9, -sym.imp.strcpy(gp)
b 0x4042a0
addiu a1, a1, 0x6b5c
lui a1, 0x40
lw t9, -sym.imp.strcpy(gp)
b 0x4042a0
addiu a1, a1, 0x6b78
lw t9, -sym.imp.strcpy(gp)
b 0x4042a0
addiu a1, a1, 0x6b8c
lui a1, 0x40
lw t9, -sym.imp.strcpy(gp)
move a0, v1
addiu a1, a1, 0x6ea0
jr t9
nop
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0xaa0
sw ra, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
addiu v0, zero, 2
lw t9, -sym.imp.strcmp(gp)
sh v0, (a1)
sh zero, 2(a1)
move s1, a1
lui a1, 0x40
addiu a1, a1, 0x6ba4
jalr t9
move s2, a0
lw gp, 0x10(sp)
bnez v0, 0x404300
nop
b 0x40435c
sw zero, 4(s1)
lw t9, -sym.imp.getnetbyname(gp)
nop
jalr t9
move a0, s2
lw gp, 0x10(sp)
beqz v0, 0x404364
move a1, v0
lw v0, 0xc(v0)
lw t9, -sym.imp.strcpy(gp)
srl a2, v0, 0x18
sll v1, v0, 0x18
srl a0, v0, 8
or v1, v1, a2
andi a0, a0, 0xff00
andi v0, v0, 0xff00
or v1, v1, a0
sll v0, v0, 8
or v1, v1, v0
lw a1, (a1)
sw v1, 4(s1)
jalr t9
move a0, s2
lw gp, 0x10(sp)
b 0x4043f4
addiu v1, zero, 1
lw t9, -sym.imp.gethostbyname(gp)
nop
jalr t9
move a0, s2
--
bnez v0, 0x4043bc
move s0, v0
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.__h_errno_location(gp)
nop
jalr t9
move s0, v0
lw v0, (v0)
lw gp, 0x10(sp)
addiu v1, zero, -1
b 0x4043f4
sw v0, (s0)
lw v0, 0x10(v0)
lw t9, -sym.imp.memcpy(gp)
lw a2, 0xc(s0)
lw a1, (v0)
jalr t9
addiu a0, s1, 4
lw gp, 0x10(sp)
lw a1, (s0)
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
move a0, s2
lw gp, 0x10(sp)
move v1, zero
lw ra, 0x24(sp)
move v0, v1
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
jr ra
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x98
addiu gp, gp, -0xaa0
sw ra, 0x94(sp)
sw s5, 0x90(sp)
sw s4, 0x8c(sp)
sw s3, 0x88(sp)
sw s2, 0x84(sp)
--
nop
nop
bnez a3, 0x40478c
div zero, v1, a3
break 7
mflo a3
jalr t9
sw v0, 0x10(sp)
lw ra, 0x24(sp)
lw gp, 0x18(sp)
jr ra
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0xaa0
sw ra, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
andi v0, a2, 1
move s2, a2
move s1, a1
beqz v0, 0x4047f4
move s0, a0
lw t9, -sym.imp.strcpy(gp)
lui a1, 0x40
addiu a1, a1, 0x6cb4
jalr t9
addiu s0, a0, 4
lw gp, 0x10(sp)
andi v0, s2, 2
beqz v0, 0x404820
andi v0, s2, 0x2000
lw t9, -sym.imp.strcpy(gp)
lui a1, 0x40
move a0, s0
jalr t9
addiu a1, a1, 0x6cbc
lw gp, 0x10(sp)
addiu s0, s0, 4
andi v0, s2, 0x2000
beqz v0, 0x404924
lui a1, 0x40
lw t9, -sym.imp.strcpy(gp)
move a0, s0
jalr t9
addiu a1, a1, 0x6cc4
andi v0, s2, 4
lw gp, 0x10(sp)
beqz v0, 0x404880
addiu a0, s0, 0xa
mtc1 s1, f0
lui v0, 0x40
lui a1, 0x40
cvt.d.w f2, f0
lw t9, -sym.imp.sprintf(gp)
lwc1 f0, 0x7390(v0)
nop
lwc1 f1, 0x7394(v0)
nop
div.d f4, f2, f0
mfc1 a2, f4
mfc1 a3, f5
b 0x4048c4
--
addiu a1, a1, 0x6cdc
lui a1, 0x40
lw t9, -sym.imp.sprintf(gp)
move a0, s0
addiu a1, a1, 0x6ce4
move a2, s1
lw ra, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
jr t9
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x28
addiu gp, gp, -0xaa0
sw ra, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
andi v0, a2, 1
move s1, a2
move s2, a1
beqz v0, 0x40499c
move s0, a0
lw t9, -sym.imp.strcpy(gp)
lui a1, 0x40
addiu a1, a1, 0x6cb4
jalr t9
addiu s0, a0, 4
lw gp, 0x10(sp)
andi v0, s1, 2
beqz v0, 0x4049c8
andi v0, s1, 0x2000
lw t9, -sym.imp.strcpy(gp)
lui a1, 0x40
move a0, s0
jalr t9
addiu a1, a1, 0x6cbc
lw gp, 0x10(sp)
addiu s0, s0, 4
andi v0, s1, 0x2000
lw t9, -sym.imp.strcpy(gp)
beqz v0, 0x4049ec
move a0, s0
lui a1, 0x40
jalr t9
addiu a1, a1, 0x6cf0
lw gp, 0x10(sp)
b 0x404a00
addiu a0, s0, 9
lui a1, 0x40
jalr t9
addiu a1, a1, 0x6cfc
lw gp, 0x10(sp)
addiu a0, s0, 8
andi v0, s1, 4
beqz v0, 0x404a44
lui v0, 0xf
mtc1 s2, f0
lui v0, 0x40
lui a1, 0x40
cvt.d.w f2, f0
--
move a2, s2
lw ra, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
addiu a1, a1, 0x6cdc
jr t9
addiu sp, sp, 0x28
lui gp, 0x42
addiu sp, sp, -0x38
addiu gp, gp, -0xaa0
sw ra, 0x34(sp)
sw s6, 0x30(sp)
sw s5, 0x2c(sp)
sw s4, 0x28(sp)
sw s3, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
andi a3, a3, 0x800
move s4, a1
move s3, a2
beqz a3, 0x404bf4
move s1, a0
lw t9, -sym.imp.strcpy(gp)
bgtz a2, 0x404b7c
lui s0, 0x40
lui a1, 0x40
lw ra, 0x34(sp)
lw s6, 0x30(sp)
lw s5, 0x2c(sp)
lw s4, 0x28(sp)
lw s3, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
addiu a1, a1, 0x6d08
jr t9
addiu sp, sp, 0x38
jalr t9
addiu a1, s0, 0x6d0c
lui v0, 0x40
lw gp, 0x10(sp)
addiu s1, s1, 2
addiu s5, v0, 0x6d10
addiu s4, s0, 0x6d0c
b 0x404bdc
addiu s2, zero, 1
bnez v1, 0x404bc4
move a0, s1
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
move a1, s5
addiu s0, s1, 1
lw gp, 0x10(sp)
move s1, s0
lw t9, -sym.imp.strcpy(gp)
move a0, s1
jalr t9
move a1, s4
lw gp, 0x10(sp)
addiu s1, s1, 2
slt v0, s2, s3
andi v1, s2, 1
bnez v0, 0x404ba0
addiu s2, s2, 1
b 0x404c78
nop
lw t9, -sym.imp.sprintf(gp)
lui s0, 0x40
lbu a2, (a1)
jalr t9
addiu a1, s0, 0x6d14
lui v0, 0x40
lw gp, 0x10(sp)
addiu s1, s1, 2
addiu s6, v0, 0x6d10
addiu s5, s0, 0x6d14
b 0x404c6c
addiu s2, zero, 1
bnez v1, 0x404c4c
addu v0, s4, s2
lw t9, -sym.imp.strcpy(gp)
move a0, s1
jalr t9
move a1, s6
addiu s0, s1, 1
lw gp, 0x10(sp)
move s1, s0
addu v0, s4, s2
lw t9, -sym.imp.sprintf(gp)
lbu a2, (v0)
move a0, s1
jalr t9
move a1, s5
lw gp, 0x10(sp)
addiu s2, s2, 1
addiu s1, s1, 2
slt v0, s2, s3
bnez v0, 0x404c24
andi v1, s2, 1
lw ra, 0x34(sp)
lw s6, 0x30(sp)
--
b 0x4054e8
addiu a0, a0, 0x6e3c
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
move a0, s1
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.malloc(gp)
nop
jalr t9
addiu a0, v0, 0x21
lw gp, 0x10(sp)
bnez v0, 0x4054fc
move s3, v0
lw v0, -0x7f3c(gp)
lui a0, 0x40
lw t9, -sym.imp.fputs(gp)
lw a1, (v0)
addiu a0, a0, 0x70b8
jalr t9
addiu s0, zero, -1
lw gp, 0x10(sp)
b 0x40563c
nop
lw t9, -sym.imp.strcpy(gp)
addiu s0, v0, 0x20
move a1, s1
jalr t9
move a0, s0
lw gp, 0x10(sp)
lui s1, 0x40
lw t9, -sym.imp.strtok(gp)
addiu a1, s1, 0x70dc
jalr t9
move a0, s0
addiu fp, s1, 0x70dc
lw gp, 0x10(sp)
move s2, v0
move s1, zero
addiu s7, zero, 0x20
addiu s6, sp, 0x1c
addiu s5, sp, 0x18
b 0x4055fc
addiu s4, zero, 2
lw t9, -sym.imp.sscanf(gp)
[*] Function strcpy used 21 times updatewifistats
