[*] Binary protection state of libxt_mport.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH Symbols
[*] Function printf tear down of libxt_mport.so
addiu a1, v0, str.dccp
move a1, zero
sll a0, s1, 8
lw t9, -sym.imp.getservbyport(gp)
srl v0, s1, 8
andi a0, a0, 0xffff
jalr t9
or a0, a0, v0
lw gp, 0x10(sp)
beqz v0, 0xca8
nop
lw a1, (v0)
nop
bnez a1, 0xcd8
nop
b 0xcc4
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.puts(gp)
nop
jalr t9
addiu a0, a0, str._nbouble
lw gp, 0x10(sp)
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x217c
b 0xce4
move a1, s1
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x2180
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr t9
addiu sp, sp, 0x28
lui gp, 2
addiu gp, gp, -0x68c8
addu gp, gp, t9
addiu sp, sp, -0x38
sw ra, 0x34(sp)
sw s6, 0x30(sp)
sw s5, 0x2c(sp)
sw s4, 0x28(sp)
sw s3, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
addiu s1, a0, 0x20
lbu v0, 0x2f(s1)
move s0, a0
beqz v0, 0xd58
andi s2, a1, 0xffff
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, 0x2184
lw gp, 0x10(sp)
lbu a0, 0x20(s0)
addiu v0, zero, 1
beq a0, v0, 0xd90
nop
beqz a0, 0xd80
addiu v0, zero, 2
bne a0, v0, 0xdbc
nop
b 0xda0
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
b 0xdac
addiu a0, a0, str.__sports
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
b 0xdac
addiu a0, a0, str.__dports
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, str.__ports
jalr t9
nop
lw gp, 0x10(sp)
nop
lw v0, -0x7fdc(gp)
andi s2, s2, 0xff
addiu s6, v0, 0x21ac
lw v0, -0x7fdc(gp)
move s0, zero
addiu s5, v0, 0x21a8
lw v0, -0x7fdc(gp)
nop
addiu s4, v0, 0x2180
lw v0, -0x7fdc(gp)
b 0xe64
addiu s3, v0, sym.print_port
beqz s0, 0xdf8
nop
move a1, s6
--
addu v0, s1, v0
lhu a0, 2(v0)
move a1, s2
move t9, s3
jalr t9
addiu a2, zero, 1
addu v0, s1, s0
lbu v0, 0x20(v0)
lw gp, 0x10(sp)
beqz v0, 0xe60
addiu a0, zero, 0x3a
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu s0, s0, 1
sll v0, s0, 1
addu v0, s1, v0
lhu a0, 2(v0)
move a1, s2
move t9, s3
jalr t9
addiu a2, zero, 1
lw gp, 0x10(sp)
addiu s0, s0, 1
lbu v0, 1(s1)
lw t9, -sym.imp.printf(gp)
sltu v0, s0, v0
move a0, s4
bnez v0, 0xdec
move a1, s5
lw t9, -sym.imp.putchar(gp)
lw ra, 0x34(sp)
lw s6, 0x30(sp)
lw s5, 0x2c(sp)
lw s4, 0x28(sp)
lw s3, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
addiu a0, zero, 0x20
jr t9
addiu sp, sp, 0x38
lui gp, 2
addiu gp, gp, -0x6a7c
addu gp, gp, t9
lhu v0, 0x80(a0)
--
lui gp, 2
addiu gp, gp, -0x6aa0
addu gp, gp, t9
lhu v0, 0x50(a0)
lw t9, -0x7fdc(gp)
move a0, a1
addiu t9, t9, sym.__mport_save_v1
jr t9
move a1, v0
lui gp, 2
addiu gp, gp, -0x6ac4
addu gp, gp, t9
addiu sp, sp, -0x40
sw ra, 0x3c(sp)
sw s7, 0x38(sp)
sw s6, 0x34(sp)
sw s5, 0x30(sp)
sw s4, 0x2c(sp)
sw s3, 0x28(sp)
sw s2, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
move s0, a0
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x21b0
move s4, a1
jalr t9
andi s2, a2, 0xffff
lbu v1, 0x20(s0)
addiu v0, zero, 1
lw gp, 0x10(sp)
beq v1, v0, 0xf88
addiu s1, s0, 0x20
beqz v1, 0xf78
addiu v0, zero, 2
lw t9, -sym.imp.printf(gp)
bne v1, v0, 0xfa4
nop
b 0xf98
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
b 0xfb0
addiu a0, a0, 0x21b8
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
b 0xfb0
addiu a0, a0, 0x21c0
lw a0, -0x7fdc(gp)
b 0xfb0
addiu a0, a0, str.ports
lw a0, -0x7fdc(gp)
nop
addiu a0, a0, str.ERROR
jalr t9
nop
lbu v0, 0x2f(s1)
lw gp, 0x10(sp)
beqz v0, 0xfe4
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, 0x2184
lw gp, 0x10(sp)
nop
lw v0, -0x7fdc(gp)
andi s2, s2, 0xff
addiu s7, v0, 0x21ac
lw v0, -0x7fdc(gp)
move s0, zero
addiu s6, v0, 0x21a8
lw v0, -0x7fdc(gp)
nop
addiu s5, v0, 0x2180
lw v0, -0x7fdc(gp)
b 0x108c
addiu s3, v0, sym.print_port
beqz s0, 0x1020
nop
move a1, s7
--
addu v0, s1, v0
lhu a0, 2(v0)
move a1, s2
move t9, s3
jalr t9
move a2, s4
addu v0, s1, s0
lbu v0, 0x20(v0)
lw gp, 0x10(sp)
beqz v0, 0x1088
addiu a0, zero, 0x3a
lw t9, -sym.imp.putchar(gp)
nop
jalr t9
addiu s0, s0, 1
sll v0, s0, 1
addu v0, s1, v0
lhu a0, 2(v0)
move a1, s2
move t9, s3
jalr t9
move a2, s4
lw gp, 0x10(sp)
addiu s0, s0, 1
lbu v0, 1(s1)
lw t9, -sym.imp.printf(gp)
sltu v0, s0, v0
move a0, s5
bnez v0, 0x1014
move a1, s6
lw t9, -sym.imp.putchar(gp)
lw ra, 0x3c(sp)
lw s7, 0x38(sp)
lw s6, 0x34(sp)
lw s5, 0x30(sp)
lw s4, 0x2c(sp)
lw s3, 0x28(sp)
lw s2, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, zero, 0x20
jr t9
addiu sp, sp, 0x40
lui gp, 2
addiu gp, gp, -0x6ca8
addu gp, gp, t9
--
addiu gp, gp, -0x6cf8
addu gp, gp, t9
addiu sp, sp, -0x40
sw ra, 0x3c(sp)
sw s7, 0x38(sp)
sw s6, 0x34(sp)
sw s5, 0x30(sp)
sw s4, 0x2c(sp)
sw s3, 0x28(sp)
sw s2, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
lbu v1, 0x20(a0)
addiu v0, zero, 1
andi s0, a1, 0xffff
beq v1, v0, 0x119c
addiu s3, a0, 0x20
beqz v1, 0x118c
addiu v0, zero, 2
bne v1, v0, 0x11c8
nop
b 0x11ac
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
b 0x11b8
addiu a0, a0, str.__sports
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
b 0x11b8
addiu a0, a0, str.__dports
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, str.__ports
jalr t9
nop
lw gp, 0x10(sp)
nop
lw v0, -0x7fdc(gp)
andi s2, s0, 0xff
addiu s7, v0, 0x21ac
lw v0, -0x7fdc(gp)
addiu s1, s3, 2
addiu s6, v0, 0x21a8
lw v0, -0x7fdc(gp)
move s0, zero
addiu s5, v0, 0x2180
lw v0, -0x7fdc(gp)
b 0x1228
addiu s4, v0, sym.print_port
beqz s0, 0x1204
move a1, s6
move a1, s7
jalr t9
addiu s0, s0, 1
lhu a0, (s1)
move a1, s2
move t9, s4
jalr t9
addiu a2, zero, 1
lw gp, 0x10(sp)
addiu s1, s1, 2
lbu v0, 1(s3)
lw t9, -sym.imp.printf(gp)
sltu v0, s0, v0
bnez v0, 0x11f8
move a0, s5
lw t9, -sym.imp.putchar(gp)
lw ra, 0x3c(sp)
lw s7, 0x38(sp)
lw s6, 0x34(sp)
lw s5, 0x30(sp)
lw s4, 0x2c(sp)
lw s3, 0x28(sp)
lw s2, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, zero, 0x20
jr t9
addiu sp, sp, 0x40
lui gp, 2
addiu gp, gp, -0x6e40
addu gp, gp, t9
lhu v0, 0x80(a0)
--
addiu gp, gp, -0x6e64
addu gp, gp, t9
lhu v0, 0x50(a0)
lw t9, -0x7fdc(gp)
move a0, a1
addiu t9, t9, sym.__mport_save
jr t9
move a1, v0
lui gp, 2
addiu gp, gp, -0x6e88
addu gp, gp, t9
addiu sp, sp, -0x40
sw ra, 0x3c(sp)
sw fp, 0x38(sp)
sw s7, 0x34(sp)
sw s6, 0x30(sp)
sw s5, 0x2c(sp)
sw s4, 0x28(sp)
sw s3, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
move s0, a0
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x21b0
move fp, a1
jalr t9
andi s1, a2, 0xffff
lbu v1, 0x20(s0)
addiu v0, zero, 1
lw gp, 0x10(sp)
beq v1, v0, 0x138c
addiu s3, s0, 0x20
beqz v1, 0x1340
addiu v0, zero, 2
lw t9, -sym.imp.printf(gp)
bne v1, v0, 0x13a8
nop
b 0x139c
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x21b8
jalr t9
andi s2, s1, 0xff
lw gp, 0x10(sp)
nop
lw v0, -0x7fdc(gp)
addiu s1, s3, 2
addiu s7, v0, 0x21ac
lw v0, -0x7fdc(gp)
move s0, zero
addiu s6, v0, 0x21a8
lw v0, -0x7fdc(gp)
nop
addiu s5, v0, 0x2180
lw v0, -0x7fdc(gp)
b 0x13e4
addiu s4, v0, sym.print_port
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
b 0x134c
addiu a0, a0, 0x21c0
lw a0, -0x7fdc(gp)
b 0x134c
addiu a0, a0, str.ports
lw a0, -0x7fdc(gp)
b 0x134c
addiu a0, a0, str.ERROR
beqz s0, 0x13c0
move a1, s6
move a1, s7
jalr t9
addiu s0, s0, 1
lhu a0, (s1)
move a1, s2
move t9, s4
jalr t9
move a2, fp
lw gp, 0x10(sp)
addiu s1, s1, 2
lbu v0, 1(s3)
lw t9, -sym.imp.printf(gp)
sltu v0, s0, v0
bnez v0, 0x13b4
move a0, s5
lw t9, -sym.imp.putchar(gp)
lw ra, 0x3c(sp)
lw fp, 0x38(sp)
lw s7, 0x34(sp)
lw s6, 0x30(sp)
lw s5, 0x2c(sp)
lw s4, 0x28(sp)
lw s3, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
addiu a0, zero, 0x20
jr t9
addiu sp, sp, 0x40
lui gp, 2
addiu gp, gp, -0x7000
addu gp, gp, t9
[*] Function printf used 22 times libxt_mport.so
