[*] Binary protection state of libxt_udp.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH Symbols
[*] Function printf tear down of libxt_udp.so
nop
jr t9
addiu a0, a0, 0x1400
lui gp, 2
addiu gp, gp, -0x7504
addu gp, gp, t9
addiu sp, sp, -0x28
sw ra, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
lhu v0, 0x20(a1)
move s1, a1
bnez v0, 0x984
addiu s0, a1, 0x20
lhu v1, 2(s0)
ori v0, zero, 0xffff
beq v1, v0, 0x9e8
nop
lbu v0, 8(s0)
nop
andi v0, v0, 1
beqz v0, 0x9b0
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, section..rodata
lw gp, 0x10(sp)
lhu a1, 0x20(s1)
lhu a2, 2(s0)
lw t9, -sym.imp.printf(gp)
beq a1, a2, 0x9d8
nop
lw a0, -0x7fdc(gp)
jalr t9
addiu a0, a0, str.__sport__u:_u
b 0x9e4
nop
lw a0, -0x7fdc(gp)
jalr t9
addiu a0, a0, str.__sport__u
lw gp, 0x10(sp)
lhu v0, 4(s0)
nop
bnez v0, 0xa08
ori v0, zero, 0xffff
lhu v1, 6(s0)
nop
beq v1, v0, 0xa80
nop
lbu v0, 8(s0)
nop
andi v0, v0, 2
beqz v0, 0xa34
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, section..rodata
lw gp, 0x10(sp)
lhu a2, 6(s0)
lhu a1, 4(s0)
lw t9, -sym.imp.printf(gp)
beq a1, a2, 0xa64
nop
lw a0, -0x7fdc(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, a0, str.__dport__u:_u
jr t9
addiu sp, sp, 0x28
lw a0, -0x7fdc(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, a0, str.__dport__u
jr t9
addiu sp, sp, 0x28
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
--
lui gp, 2
addiu gp, gp, -0x7654
addu gp, gp, t9
addiu sp, sp, -0x20
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
bnez a1, 0xaf4
andi s0, a0, 0xffff
lw a1, -0x7fdc(gp)
sll a0, s0, 8
lw t9, -sym.imp.getservbyport(gp)
srl v0, s0, 8
andi a0, a0, 0xffff
or a0, a0, v0
jalr t9
addiu a1, a1, 0x11f4
lw gp, 0x10(sp)
beqz v0, 0xaf4
nop
lw a1, (v0)
nop
bnez a1, 0xb08
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x11f8
b 0xb14
move a1, s0
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x11fc
lw ra, 0x1c(sp)
lw s0, 0x18(sp)
jr t9
addiu sp, sp, 0x20
lui gp, 2
addiu gp, gp, -0x76e4
addu gp, gp, t9
addiu sp, sp, -0x30
sw ra, 0x2c(sp)
sw s4, 0x28(sp)
sw s3, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
move v1, a0
andi s1, a1, 0xffff
lw s3, 0x40(sp)
bnez a3, 0xb70
andi s2, a2, 0xffff
lw v0, -0x7fdc(gp)
b 0xb7c
addiu s0, v0, 0x1214
lw v0, -0x7fdc(gp)
nop
addiu s0, v0, 0x1200
bnez s1, 0xb94
ori v0, zero, 0xffff
bne s2, v0, 0xb94
nop
beqz a3, 0xc4c
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, 0x11fc
jalr t9
move a1, v1
lw gp, 0x10(sp)
nop
lw v0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
bne s1, s2, 0xbd8
addiu s4, v0, sym.print_port
lw a0, -0x7fdc(gp)
move a1, s0
jalr t9
addiu a0, a0, 0x1204
b 0xc14
move a0, s1
lw a0, -0x7fdc(gp)
move a1, s0
jalr t9
addiu a0, a0, str.s:_s
move a0, s1
move t9, s4
jalr t9
move a1, s3
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.putchar(gp)
nop
--
lw s3, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
addiu a0, zero, 0x20
jr t9
addiu sp, sp, 0x30
lw ra, 0x2c(sp)
lw s4, 0x28(sp)
lw s3, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 2
addiu gp, gp, -0x782c
addu gp, gp, t9
addiu sp, sp, -0x30
sw ra, 0x2c(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, str.udp
addiu s0, a1, 0x20
move s2, a2
jalr t9
move s1, a1
lw gp, 0x18(sp)
lbu a3, 8(s0)
lw v0, -0x7fdc(gp)
lw a0, -0x7fdc(gp)
lhu a1, 0x20(s1)
lhu a2, 2(s0)
addiu s1, v0, sym.print_ports
addiu a0, a0, 0x1218
andi a3, a3, 1
move t9, s1
jalr t9
sw s2, 0x10(sp)
lw gp, 0x18(sp)
lbu a3, 8(s0)
lw a0, -0x7fdc(gp)
lhu a1, 4(s0)
lhu a2, 6(s0)
addiu a0, a0, 0x121c
andi a3, a3, 2
move t9, s1
jalr t9
sw s2, 0x10(sp)
lbu v0, 8(s0)
lw gp, 0x18(sp)
andi a1, v0, 0xfc
beqz a1, 0xd3c
nop
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
addiu a0, a0, str.Unknown_invflags:_0x_X
jr t9
addiu sp, sp, 0x30
lw ra, 0x2c(sp)
lw s2, 0x28(sp)
lw s1, 0x24(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 2
addiu gp, gp, -0x7914
addu gp, gp, t9
addiu sp, sp, -0x30
sw ra, 0x2c(sp)
sw s3, 0x28(sp)
sw s2, 0x24(sp)
[*] Function printf used 10 times libxt_udp.so
