[*] Binary protection state of iptables-multi

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	No RELRO       No Canary found   NX disabled  No PIE       RPATH        No RUNPATH   No Symbols

[*] Function strcat tear down of iptables-multi

jalr t9

nop

lw gp, 0x10(sp)

lw a1, (s0)

lw t9, -sym.imp.fputc(gp)

nop

jalr t9

addiu a0, zero, 0x20

lw gp, 0x10(sp)

andi v0, s4, 0x40

beqz v0, 0x405d5c

nop

lbu v0, 0x53(s3)

nop

andi v0, v0, 1

beqz v0, 0x405c58

addiu v0, zero, 0x21

sb v0, 0x18(sp)

b 0x405c5c

sb zero, 0x19(sp)

sb zero, 0x18(sp)

lb v0, 0x10(s3)

nop

beqz v0, 0x405c78

addiu a0, sp, 0x18

lw t9, -sym.imp.strcat(gp)

b 0x405c94

addiu a1, s3, 0x10

lw t9, -sym.imp.strcat(gp)

beqz s5, 0x405c8c

lui a1, 0x41

b 0x405c94

addiu a1, a1, -0x50a4

lui a1, 0x41

addiu a1, a1, -0x50a0

jalr t9

andi s0, s4, 0x10

lw gp, 0x10(sp)

bnez s0, 0x405cb4

lui v0, 0x41

lui v0, 0x41

b 0x405cb8

addiu a0, v0, -0x509c

addiu a0, v0, -0x5094

lw t9, -sym.imp.printf(gp)

nop

jalr t9

addiu a1, sp, 0x18

lbu v0, 0x53(s3)

lw gp, 0x10(sp)

andi v0, v0, 2

beqz v0, 0x405ce8

addiu v0, zero, 0x21

sb v0, 0x18(sp)

b 0x405cec

sb zero, 0x19(sp)

sb zero, 0x18(sp)

lb v0, 0x20(s3)

nop

beqz v0, 0x405d08

addiu a0, sp, 0x18

lw t9, -sym.imp.strcat(gp)

b 0x405d24

addiu a1, s3, 0x20

lw t9, -sym.imp.strcat(gp)

beqz s5, 0x405d1c

lui a1, 0x41

b 0x405d24

addiu a1, a1, -0x50a4

lui a1, 0x41

addiu a1, a1, -0x50a0

jalr t9

nop

lw gp, 0x10(sp)

bnez s0, 0x405d44

lui v0, 0x41

lui v0, 0x41

b 0x405d48

addiu a0, v0, -0x508c

addiu a0, v0, -0x5084

lw t9, -sym.imp.printf(gp)

nop

jalr t9

addiu a1, sp, 0x18

lw gp, 0x10(sp)

--

b 0x405e50

addiu a1, a1, -0x5074

beqz s5, 0x405dd0

nop

lw t9, -sym.imp.xtables_ipaddr_to_numeric(gp)

b 0x405dd8

nop

lw t9, -sym.imp.xtables_ipaddr_to_anyname(gp)

nop

jalr t9

move a0, s3

lw gp, 0x10(sp)

move a1, v0

lw t9, -sym.imp.strcpy(gp)

nop

jalr t9

addiu a0, sp, 0x2c

lw gp, 0x10(sp)

nop

lw t9, -sym.imp.xtables_ipmask_to_numeric(gp)

nop

jalr t9

addiu a0, s3, 8

lw gp, 0x10(sp)

move a1, v0

lw t9, -sym.imp.strcat(gp)

nop

jalr t9

addiu a0, sp, 0x2c

andi v0, s4, 0x10

lw gp, 0x10(sp)

bnez v0, 0x405e44

lui v0, 0x41

lui v0, 0x41

b 0x405e48

addiu a0, v0, -0x507c

addiu a0, v0, -0x4f98

lw t9, -sym.imp.printf(gp)

addiu a1, sp, 0x2c

jalr t9

nop

lw gp, 0x10(sp)

lbu a0, 0x53(s3)

lw v0, -0x7ed8(gp)

andi a0, a0, 0x10

lw t9, -sym.imp.fputc(gp)

--

b 0x405f50

addiu a1, a1, -0x5074

beqz s5, 0x405ed0

nop

lw t9, -sym.imp.xtables_ipaddr_to_numeric(gp)

b 0x405ed8

nop

lw t9, -sym.imp.xtables_ipaddr_to_anyname(gp)

nop

jalr t9

addiu a0, s3, 4

lw gp, 0x10(sp)

move a1, v0

lw t9, -sym.imp.strcpy(gp)

nop

jalr t9

addiu a0, sp, 0x2c

lw gp, 0x10(sp)

nop

lw t9, -sym.imp.xtables_ipmask_to_numeric(gp)

nop

jalr t9

addiu a0, s3, 0xc

lw gp, 0x10(sp)

move a1, v0

lw t9, -sym.imp.strcat(gp)

nop

jalr t9

addiu a0, sp, 0x2c

andi v0, s4, 0x10

lw gp, 0x10(sp)

bnez v0, 0x405f44

lui v0, 0x41

lui v0, 0x41

b 0x405f48

addiu a0, v0, -0x507c

addiu a0, v0, -0x5068

lw t9, -sym.imp.printf(gp)

addiu a1, sp, 0x2c

jalr t9

nop

andi v0, s4, 0x10

lw gp, 0x10(sp)

beqz v0, 0x405f84

nop

lw v0, -0x7ed8(gp)

[*] Function strcat used 6 times iptables-multi