[*] Binary protection state of ip6tables-multi
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE RPATH No RUNPATH No Symbols
[*] Function strcat tear down of ip6tables-multi
jalr t9
addiu a0, zero, 0x20
lw gp, 0x10(sp)
lw a1, (s0)
lw t9, -sym.imp.fputc(gp)
nop
jalr t9
addiu a0, zero, 0x20
lw gp, 0x10(sp)
andi v0, s4, 0x40
beqz v0, 0x4039d4
nop
lbu v0, 0x84(s3)
nop
andi v0, v0, 1
beqz v0, 0x4038d0
addiu v0, zero, 0x21
sb v0, 0x18(sp)
b 0x4038d4
sb zero, 0x19(sp)
sb zero, 0x18(sp)
lb v0, 0x40(s3)
nop
beqz v0, 0x4038f0
addiu a0, sp, 0x18
lw t9, -sym.imp.strcat(gp)
b 0x40390c
addiu a1, s3, 0x40
lw t9, -sym.imp.strcat(gp)
beqz s5, 0x403904
lui a1, 0x41
b 0x40390c
addiu a1, a1, -0x762c
lui a1, 0x41
addiu a1, a1, -0x7628
jalr t9
andi s0, s4, 0x10
lw gp, 0x10(sp)
bnez s0, 0x40392c
lui v0, 0x41
lui v0, 0x41
b 0x403930
addiu a0, v0, -0x7624
addiu a0, v0, -0x761c
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a1, sp, 0x18
lbu v0, 0x84(s3)
lw gp, 0x10(sp)
andi v0, v0, 2
beqz v0, 0x403960
addiu v0, zero, 0x21
sb v0, 0x18(sp)
b 0x403964
sb zero, 0x19(sp)
sb zero, 0x18(sp)
lb v0, 0x50(s3)
nop
beqz v0, 0x403980
addiu a0, sp, 0x18
lw t9, -sym.imp.strcat(gp)
b 0x40399c
addiu a1, s3, 0x50
lw t9, -sym.imp.strcat(gp)
beqz s5, 0x403994
lui a1, 0x41
b 0x40399c
addiu a1, a1, -0x762c
lui a1, 0x41
addiu a1, a1, -0x7628
jalr t9
nop
lw gp, 0x10(sp)
bnez s0, 0x4039bc
lui v0, 0x41
lui v0, 0x41
b 0x4039c0
addiu a0, v0, -0x7614
addiu a0, v0, -0x760c
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a1, sp, 0x18
lw gp, 0x10(sp)
--
b 0x403ae0
addiu a1, a1, -0x75fc
beqz s5, 0x403a60
nop
lw t9, -sym.imp.xtables_ip6addr_to_numeric(gp)
b 0x403a68
nop
lw t9, -sym.imp.xtables_ip6addr_to_anyname(gp)
nop
jalr t9
move a0, s3
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a0, sp, 0x2c
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.xtables_ip6mask_to_numeric(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcat(gp)
nop
jalr t9
addiu a0, sp, 0x2c
andi v0, s4, 0x10
lw gp, 0x10(sp)
bnez v0, 0x403ad4
lui v0, 0x41
lui v0, 0x41
b 0x403ad8
addiu a0, v0, -0x7604
addiu a0, v0, -0x74e8
lw t9, -sym.imp.printf(gp)
addiu a1, sp, 0x2c
jalr t9
addiu s0, s3, 0x30
lw gp, 0x10(sp)
lbu a0, 0x84(s3)
lw v0, -0x7ec0(gp)
andi a0, a0, 0x10
lw t9, -sym.imp.fputc(gp)
--
b 0x403bf8
addiu a1, a1, -0x75fc
beqz s5, 0x403b78
nop
lw t9, -sym.imp.xtables_ip6addr_to_numeric(gp)
b 0x403b80
nop
lw t9, -sym.imp.xtables_ip6addr_to_anyname(gp)
nop
jalr t9
addiu a0, s3, 0x10
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a0, sp, 0x2c
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.xtables_ip6mask_to_numeric(gp)
nop
jalr t9
move a0, s0
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcat(gp)
nop
jalr t9
addiu a0, sp, 0x2c
andi v0, s4, 0x10
lw gp, 0x10(sp)
bnez v0, 0x403bec
lui v0, 0x41
lui v0, 0x41
b 0x403bf0
addiu a0, v0, -0x7604
addiu a0, v0, -0x75f0
lw t9, -sym.imp.printf(gp)
addiu a1, sp, 0x2c
jalr t9
nop
andi v0, s4, 0x10
lw gp, 0x10(sp)
beqz v0, 0x403c2c
nop
lw v0, -0x7ec0(gp)
[*] Function strcat used 6 times ip6tables-multi