[*] Binary protection state of iptables-multi
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of iptables-multi
bnez v0, 0x405dbc
nop
bnez s5, 0x405dc4
andi v0, s4, 0x10
bnez v0, 0x405da8
lui v0, 0x41
lui v0, 0x41
b 0x405dac
addiu a0, v0, -0x507c
addiu a0, v0, -0x4f98
lui a1, 0x41
lw t9, -sym.imp.printf(gp)
b 0x405e50
addiu a1, a1, -0x5074
beqz s5, 0x405dd0
nop
lw t9, -sym.imp.xtables_ipaddr_to_numeric(gp)
b 0x405dd8
nop
lw t9, -sym.imp.xtables_ipaddr_to_anyname(gp)
nop
jalr t9
move a0, s3
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a0, sp, 0x2c
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.xtables_ipmask_to_numeric(gp)
nop
jalr t9
addiu a0, s3, 8
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcat(gp)
nop
jalr t9
addiu a0, sp, 0x2c
andi v0, s4, 0x10
lw gp, 0x10(sp)
bnez v0, 0x405e44
lui v0, 0x41
lui v0, 0x41
--
bnez v0, 0x405ebc
nop
bnez s5, 0x405ec4
andi v0, s4, 0x10
bnez v0, 0x405ea8
lui v0, 0x41
lui v0, 0x41
b 0x405eac
addiu a0, v0, -0x507c
addiu a0, v0, -0x5068
lui a1, 0x41
lw t9, -sym.imp.printf(gp)
b 0x405f50
addiu a1, a1, -0x5074
beqz s5, 0x405ed0
nop
lw t9, -sym.imp.xtables_ipaddr_to_numeric(gp)
b 0x405ed8
nop
lw t9, -sym.imp.xtables_ipaddr_to_anyname(gp)
nop
jalr t9
addiu a0, s3, 4
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a0, sp, 0x2c
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.xtables_ipmask_to_numeric(gp)
nop
jalr t9
addiu a0, s3, 0xc
lw gp, 0x10(sp)
move a1, v0
lw t9, -sym.imp.strcat(gp)
nop
jalr t9
addiu a0, sp, 0x2c
andi v0, s4, 0x10
lw gp, 0x10(sp)
bnez v0, 0x405f44
lui v0, 0x41
lui v0, 0x41
--
move a0, s5
lw t9, -sym.imp.xtables_malloc(gp)
nop
jalr t9
sll a0, s4, 5
lw gp, 0x10(sp)
move s3, v0
lw t9, -sym.imp.iptc_first_chain(gp)
nop
jalr t9
move a0, s5
lw gp, 0x10(sp)
move s2, s3
b 0x406738
move s0, s3
jalr t9
nop
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.iptc_next_chain(gp)
nop
jalr t9
move a0, s5
lw gp, 0x10(sp)
move a0, s0
lw t9, -sym.imp.strcpy(gp)
move a1, v0
bnez v0, 0x406714
addiu s0, s0, 0x20
addiu s1, zero, 1
move s0, zero
b 0x406798
addiu s6, zero, 1
bnez s7, 0x406778
nop
jalr t9
nop
lw gp, 0x10(sp)
beq v0, s6, 0x406794
nop
lw t9, 0x40(sp)
move a0, s2
move a1, fp
jalr t9
move a2, s5
lw gp, 0x10(sp)
--
lw a0, 0x178(sp)
jal 0x405198
addiu a1, zero, 0x10
lw a0, (s4)
jal 0x405620
nop
lw gp, 0x38(sp)
sw v0, 0x140(sp)
lw t9, -sym.imp.xtables_find_target(gp)
move a0, v0
jalr t9
addiu a1, zero, 2
lw gp, 0x38(sp)
beqz v0, 0x407eb4
move s3, v0
lw s0, 0x10(v0)
lw t9, -sym.imp.xtables_calloc(gp)
addiu s0, s0, 0x20
addiu a0, zero, 1
jalr t9
move a1, s0
lw gp, 0x38(sp)
sw v0, 0x38(s3)
sh s0, (v0)
lw a0, 0x38(s3)
lw t9, -sym.imp.strcpy(gp)
lw a1, 0x140(sp)
jalr t9
addiu a0, a0, 2
lw gp, 0x38(sp)
lw a0, 0x38(s3)
lw t9, -sym.imp.xtables_set_revision(gp)
lbu a1, 0xc(s3)
jalr t9
addiu a0, a0, 2
lw t9, 0x1c(s3)
lw gp, 0x38(sp)
beqz t9, 0x40769c
nop
lw a0, 0x38(s3)
jalr t9
nop
lw gp, 0x38(sp)
lui a1, 0x42
addiu a1, a1, -0x3aa0
lw a0, 0x10(a1)
--
nop
beqz v0, 0x4077e0
lui a1, 0x41
lw v0, -0x7e40(gp)
nop
lw v0, (v0)
b 0x407524
addiu a1, a1, -0x444c
lw t9, -sym.imp.xtables_find_match(gp)
lw a2, 0x170(sp)
lw a0, (s4)
jalr t9
addiu a1, zero, 3
lw gp, 0x38(sp)
lw s0, 0x10(v0)
lw t9, -sym.imp.xtables_calloc(gp)
addiu s0, s0, 0x20
addiu a0, zero, 1
move a1, s0
jalr t9
move s1, v0
lw gp, 0x38(sp)
sw v0, 0x38(s1)
sh s0, (v0)
lw a0, 0x38(s1)
lw t9, -sym.imp.strcpy(gp)
lw a1, 8(s1)
jalr t9
addiu a0, a0, 2
lw gp, 0x38(sp)
lw a0, 0x38(s1)
lw t9, -sym.imp.xtables_set_revision(gp)
lbu a1, 0xc(s1)
jalr t9
addiu a0, a0, 2
lw t9, 0x1c(s1)
lw gp, 0x38(sp)
beqz t9, 0x40786c
nop
lw a0, 0x38(s1)
jalr t9
nop
lw gp, 0x38(sp)
lw v0, 4(s1)
nop
beq s1, v0, 0x407eb4
--
beqz v0, 0x409774
addiu v0, zero, 0x3f
lw a0, 0x13c(sp)
nop
bnez a0, 0x409774
nop
lw a2, 0x5c(sp)
lw a0, 0x138(sp)
lw a3, 0x170(sp)
andi a2, a2, 1
jal 0x405838
addiu a1, zero, 2
lw gp, 0x38(sp)
beqz v0, 0x409770
move s1, v0
lw s0, 0x10(v0)
lw t9, -sym.imp.xtables_calloc(gp)
addiu s0, s0, 0x20
addiu a0, zero, 1
jalr t9
move a1, s0
lw gp, 0x38(sp)
sw v0, 0x38(s1)
sh s0, (v0)
lw a0, 0x38(s1)
lw t9, -sym.imp.strcpy(gp)
lw a1, 8(s1)
jalr t9
addiu a0, a0, 2
lw gp, 0x38(sp)
lw a0, 0x38(s1)
lw t9, -sym.imp.xtables_set_revision(gp)
lbu a1, 0xc(s1)
jalr t9
addiu a0, a0, 2
lw t9, 0x1c(s1)
lw gp, 0x38(sp)
beqz t9, 0x407db4
lui a1, 0x42
lw a0, 0x38(s1)
jalr t9
nop
lw gp, 0x38(sp)
lui a1, 0x42
addiu a1, a1, -0x3aa0
lw t9, -sym.imp.xtables_merge_options(gp)
--
lw a0, 0x1c4(sp)
lw t9, -sym.imp.iptc_is_chain(gp)
lw a1, (a0)
jalr t9
move a0, v1
lw gp, 0x38(sp)
beqz v0, 0x4085f4
nop
lw t9, -sym.imp.xtables_find_target(gp)
lui a0, 0x41
addiu a0, a0, -0x5a1c
jalr t9
addiu a1, zero, 3
lw gp, 0x38(sp)
lw s0, 0x10(v0)
lw t9, -sym.imp.xtables_calloc(gp)
addiu s0, s0, 0x20
addiu a0, zero, 1
move a1, s0
jalr t9
move s3, v0
lw gp, 0x38(sp)
sw v0, 0x38(s3)
sh s0, (v0)
lw a0, 0x38(s3)
lw t9, -sym.imp.strcpy(gp)
lw a1, 0x140(sp)
jalr t9
addiu a0, a0, 2
lw gp, 0x38(sp)
lw t9, 0x1c4(sp)
lw a0, 0x140(sp)
lw a1, (t9)
lw t9, -sym.imp.iptc_is_chain(gp)
nop
jalr t9
nop
lw gp, 0x38(sp)
bnez v0, 0x4085cc
nop
lw a0, 0x38(s3)
lw t9, -sym.imp.xtables_set_revision(gp)
lbu a1, 0xc(s3)
jalr t9
addiu a0, a0, 2
lw gp, 0x38(sp)
[*] Function strcpy used 7 times iptables-multi
