[*] Binary protection state of nsbbox
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of nsbbox
nop
lui v0, 0x41
addiu v0, v0, -0x43dc
sw v0, -0x262c(s0)
bnez s3, 0x406588
lui s0, 0x42
lw t9, -sym.imp.gethostname(gp)
addiu a0, s0, -0x261c
jalr t9
addiu a1, zero, 0xfff
lw gp, 0x18(sp)
bltz v0, 0x406450
nop
lw t9, -sym.imp.gethostbyname(gp)
nop
jalr t9
addiu a0, s0, -0x261c
lw gp, 0x18(sp)
bnez v0, 0x406578
nop
lui a0, 0x41
addiu a0, a0, -0x43d0
b 0x4065cc
addiu a1, s0, -0x261c
lw a1, (v0)
lw t9, -sym.imp.strcpy(gp)
b 0x406594
addiu a0, s0, -0x261c
lw t9, -sym.imp.strcpy(gp)
addiu a0, s0, -0x261c
move a1, s3
jalr t9
lui s1, 0x42
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.gethostbyname(gp)
lw a0, -0x262c(s1)
jalr t9
nop
lw gp, 0x18(sp)
bnez v0, 0x4065dc
move s0, v0
lui a0, 0x41
lw a1, -0x262c(s1)
addiu a0, a0, -0x43d0
jal 0x405a30
nop
b 0x406448
nop
--
jalr t9
nop
lw gp, 0x18(sp)
addiu a0, zero, 1
lw t9, -sym.imp.exit(gp)
nop
jalr t9
nop
sw v1, 0x3c(sp)
b 0x406c20
move s1, zero
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
move a0, s0
sltiu v0, v0, 0x10
lw gp, 0x18(sp)
bnez v0, 0x406c0c
move s1, s0
lw v0, -0x7ec8(gp)
lui a0, 0x41
lw t9, -sym.imp.fputs(gp)
lw a1, (v0)
b 0x406ba8
addiu a0, a0, -0x4160
lw t9, -sym.imp.strcpy(gp)
addiu a0, sp, 0x24
jalr t9
move a1, s0
lw gp, 0x18(sp)
addiu v0, zero, 4
bne s5, v0, 0x406c4c
addiu v0, zero, 5
lw t9, -sym.imp.atoi(gp)
lw a0, 0xc(s4)
jalr t9
nop
lw gp, 0x18(sp)
move s3, v0
b 0x406c88
sw v0, 0x3c(sp)
bne s5, v0, 0x406c88
move s3, zero
lw t9, -sym.imp.atoi(gp)
lw a0, 0xc(s4)
jalr t9
[*] Function strcpy used 3 times nsbbox