[*] Binary protection state of libxt_physdev.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH Symbols
[*] Function printf tear down of libxt_physdev.so
lui gp, 2
addiu gp, gp, -0x7400
addu gp, gp, t9
addiu sp, sp, -0x20
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
addiu s0, a1, 0x20
lbu v0, 0x41(s0)
nop
andi v0, v0, 8
beqz v0, 0x998
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 8
bnez v0, 0x974
nop
lw v0, -0x7fdc(gp)
b 0x980
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x1178
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, str._s__physdev_is_in
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 1
beqz v0, 0x9f0
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 1
bnez v0, 0x9cc
nop
lw v0, -0x7fdc(gp)
b 0x9d8
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x1178
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, str._s__physdev_in__s
jalr t9
move a2, s0
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 0x10
beqz v0, 0xa48
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 0x10
bnez v0, 0xa24
nop
lw v0, -0x7fdc(gp)
b 0xa30
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x1178
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, str._s__physdev_is_out
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 2
beqz v0, 0xaa0
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 2
bnez v0, 0xa7c
nop
lw v0, -0x7fdc(gp)
b 0xa88
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x1178
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, str._s__physdev_out__s
jalr t9
addiu a2, s0, 0x20
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 4
beqz v0, 0xafc
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 4
bnez v0, 0xad4
nop
lw v0, -0x7fdc(gp)
b 0xae0
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x1178
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
lw ra, 0x1c(sp)
lw s0, 0x18(sp)
addiu a0, a0, str._s__physdev_is_bridged
jr t9
addiu sp, sp, 0x20
lw ra, 0x1c(sp)
lw s0, 0x18(sp)
jr ra
addiu sp, sp, 0x20
lui gp, 2
addiu gp, gp, -0x75ec
addu gp, gp, t9
addiu sp, sp, -0x20
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu s0, a1, 0x20
jalr t9
addiu a0, a0, str.PHYSDEV_match
lbu v0, 0x41(s0)
lw gp, 0x10(sp)
andi v0, v0, 8
beqz v0, 0xb94
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 8
bnez v0, 0xb70
nop
lw v0, -0x7fdc(gp)
b 0xb7c
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x11f4
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, str._s___physdev_is_in
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 1
beqz v0, 0xbec
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 1
bnez v0, 0xbc8
nop
lw v0, -0x7fdc(gp)
b 0xbd4
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x11f4
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, str._s___physdev_in__s
jalr t9
move a2, s0
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 0x10
beqz v0, 0xc44
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 0x10
bnez v0, 0xc20
nop
lw v0, -0x7fdc(gp)
b 0xc2c
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x11f4
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, str._s___physdev_is_out
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 2
beqz v0, 0xc9c
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 2
bnez v0, 0xc78
nop
lw v0, -0x7fdc(gp)
b 0xc84
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x11f4
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
addiu a0, a0, str._s___physdev_out__s
jalr t9
addiu a2, s0, 0x20
lw gp, 0x10(sp)
lbu v0, 0x41(s0)
nop
andi v0, v0, 4
beqz v0, 0xcf8
nop
lbu v0, 0x40(s0)
nop
andi v0, v0, 4
bnez v0, 0xcd0
nop
lw v0, -0x7fdc(gp)
b 0xcdc
addiu a1, v0, 0x1174
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0x11f4
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, str._s___physdev_is_bridged
lw gp, 0x10(sp)
nop
lw t9, -sym.imp.putchar(gp)
lw ra, 0x1c(sp)
lw s0, 0x18(sp)
addiu a0, zero, 0x20
jr t9
addiu sp, sp, 0x20
lui gp, 2
addiu gp, gp, -0x77f0
addu gp, gp, t9
addiu sp, sp, -0x30
sw ra, 0x2c(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
[*] Function printf used 11 times libxt_physdev.so