[*] Binary protection state of libip4tc.so.0.0.0
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH Symbols
[*] Function strcpy tear down of libip4tc.so.0.0.0
addiu v0, a0, 0x28
addu s1, v0, v1
lhu v1, (s1)
addiu v0, zero, 0x28
move s2, a0
beq v1, v0, 0x12f0
move s3, a1
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
addiu v1, zero, 0x16
sw v1, (v0)
lw gp, 0x10(sp)
b 0x1334
move v0, zero
lw t9, -sym.imp.memset(gp)
addiu s0, s1, 2
move a0, s0
move a1, zero
jalr t9
addiu a2, zero, 0x1e
lw gp, 0x10(sp)
move a0, s0
lw a1, -0x7fdc(gp)
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a1, a1, 0x52a0
lw gp, 0x10(sp)
sw s3, 0x20(s1)
sw zero, 0x1c(s2)
addiu v0, zero, 1
lw ra, 0x2c(sp)
lw s3, 0x28(sp)
lw s2, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 2
addiu gp, gp, -0x3b60
addu gp, gp, t9
addiu sp, sp, -0x20
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
--
addiu v0, v0, 0x28
lw t9, -sym.imp.malloc(gp)
sw v0, 0x24(sp)
jalr t9
move a0, v0
lw gp, 0x18(sp)
bnez v0, 0x1600
move s5, v0
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
addiu v1, zero, 0xc
lw gp, 0x18(sp)
b 0x1be4
sw v1, (v0)
lw t9, -sym.imp.memset(gp)
lw a2, 0x24(sp)
move a0, v0
jalr t9
move a1, zero
lw a0, 0x58(sp)
lw gp, 0x18(sp)
addiu a0, a0, 0x28
sw a0, 0x28(sp)
lw t9, -sym.imp.strcpy(gp)
lw a1, 0x28(sp)
jalr t9
move a0, s3
lw v1, 0x58(sp)
lw a0, 0x58(sp)
lw v0, 0x74(v1)
lw v1, 0x48(v1)
lw gp, 0x18(sp)
sw s1, 0x28(s3)
sw v0, 0x54(s3)
sw v1, 0x20(s3)
sw fp, 0x24(s3)
lw s4, 8(a0)
b 0x1830
addiu s7, s3, 0x60
lw v0, 0x28(s4)
lw v1, 0x60(s4)
bnez v0, 0x16c0
addu s0, s7, v1
lw a1, -0x7fdc(gp)
lw t9, -sym.imp.strcpy(gp)
addiu v1, zero, 0xb0
addiu v0, zero, 0x70
sh v1, 0x5a(s0)
addiu a0, s0, 0x72
addiu a1, a1, str.ERROR
jalr t9
sh v0, 0x58(s0)
lw gp, 0x18(sp)
addiu a0, zero, 0x40
lw t9, -sym.imp.strcpy(gp)
sh a0, 0x70(s0)
addiu a1, s4, 8
jalr t9
addiu a0, s0, 0x90
lw gp, 0x18(sp)
b 0x16ec
addiu v0, s4, 0x54
addiu v0, v0, 9
sll v0, v0, 2
addu v0, s3, v0
sw v1, 4(v0)
lw v0, 0x28(s4)
lw v1, 0x68(s4)
addiu v0, v0, 0xf
sll v0, v0, 2
addu v0, s3, v0
sw v1, (v0)
addiu v0, s4, 0x54
lw s2, 0x54(s4)
b 0x17a8
sw v0, 0x20(sp)
lw v0, 0x1c(s2)
nop
bne v0, v1, 0x1764
addiu s0, s2, 0x28
lhu v0, 0x80(s2)
nop
addu s0, s0, v0
lw t9, -sym.imp.memset(gp)
addiu s1, s0, 2
move a0, s1
move a1, zero
jalr t9
addiu a2, zero, 0x1e
lw gp, 0x18(sp)
move a0, s1
lw a1, -0x7fdc(gp)
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a1, a1, 0x52a0
lw v0, 0x20(s2)
lw gp, 0x18(sp)
lw v0, 0x60(v0)
nop
addiu v0, v0, 0xb0
b 0x1788
sw v0, 0x20(s0)
addiu a0, zero, 2
bne v0, a0, 0x1788
nop
lw v0, 0x24(s2)
lw a0, 0x18(s2)
lhu v1, 0x80(s2)
addu v0, v0, a0
addu v1, s2, v1
sw v0, 0x48(v1)
lw a0, 0x18(s2)
lw t9, -sym.imp.memcpy(gp)
lw a2, 0x24(s2)
addiu a1, s2, 0x28
jalr t9
addu a0, s7, a0
lw gp, 0x18(sp)
lw s2, (s2)
lw v0, 0x20(sp)
nop
bne s2, v0, 0x16f8
addiu v1, zero, 3
lw v0, 0x68(s4)
lw a1, -0x7fdc(gp)
addu s0, s7, v0
lw t9, -sym.imp.strcpy(gp)
addiu v1, zero, 0x70
addiu a0, zero, 0x98
sh a0, 0x5a(s0)
sh v1, 0x58(s0)
addiu a0, s0, 0x72
jalr t9
addiu a1, a1, 0x52a0
addiu v0, zero, 0x28
lw gp, 0x18(sp)
sh v0, 0x70(s0)
lw v0, 0x28(s4)
nop
beqz v0, 0x180c
addiu v1, zero, -5
lw v0, 0x30(s4)
b 0x1810
sw v0, 0x90(s0)
sw v1, 0x90(s0)
lw t9, -sym.imp.memcpy(gp)
addiu a1, s4, 0x38
addiu a0, s0, 0x60
jalr t9
addiu a2, zero, 0x10
lw gp, 0x18(sp)
lw s4, (s4)
nop
bne s4, s6, 0x1664
addiu v0, zero, 0x70
lw s0, 0x28(s3)
nop
addiu s0, s0, -0xb0
addu s0, s7, s0
lw s1, -0x7fdc(gp)
sh v0, 0x58(s0)
addiu v0, zero, 0xb0
lw t9, -sym.imp.strcpy(gp)
sh v0, 0x5a(s0)
addiu v0, zero, 0x40
addiu a0, s0, 0x72
addiu a1, s1, str.ERROR
jalr t9
sh v0, 0x70(s0)
lw gp, 0x18(sp)
addiu a0, s0, 0x90
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a1, s1, str.ERROR
lw gp, 0x18(sp)
lw v0, 0x28(s3)
lw v1, 0x58(sp)
lw t9, -sym.imp.setsockopt(gp)
lw a0, (v1)
addiu v0, v0, 0x60
sw v0, 0x10(sp)
move a1, zero
addiu a2, zero, 0x40
jalr t9
move a3, s3
lw gp, 0x18(sp)
bltz v0, 0x1bcc
nop
lw t9, -sym.imp.strcpy(gp)
lw a1, 0x28(sp)
jalr t9
move a0, s5
lw a0, 0x58(sp)
sw fp, 0x20(s5)
lw gp, 0x18(sp)
lw s1, 8(a0)
addiu fp, zero, 1
addiu s6, zero, 2
b 0x1b4c
addiu s7, zero, 3
lw v0, 0x28(s1)
nop
beqz v0, 0x1a14
nop
lw v0, 0x48(s1)
nop
beq v0, fp, 0x1950
nop
beqz v0, 0x1930
--
lw v1, -sym.iptc_init(gp)
lw v0, -0x7fe8(gp)
lw t9, -sym.imp.strlen(gp)
sw v1, 0x5910(v0)
jalr t9
sw a0, 0xb8(sp)
sltiu v0, v0, 0x20
lw gp, 0x18(sp)
bnez v0, 0x48d8
addiu a0, zero, 2
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
move s6, zero
addiu v1, zero, 0x16
lw gp, 0x18(sp)
b 0x4f04
sw v1, (v0)
lw t9, -sym.imp.socket(gp)
addiu a1, zero, 3
jalr t9
addiu a2, zero, 0xff
lw gp, 0x18(sp)
bltz v0, 0x4f00
move fp, v0
lw t9, -sym.imp.strcpy(gp)
addiu s2, sp, 0x30
addiu v0, zero, 0x54
lw a1, 0xb8(sp)
move a0, s2
jalr t9
sw v0, 0x24(sp)
lw gp, 0x18(sp)
addiu v0, sp, 0x24
lw t9, -sym.imp.getsockopt(gp)
sw v0, 0x10(sp)
move a0, fp
move a1, zero
addiu a2, zero, 0x40
jalr t9
move a3, s2
lw gp, 0x18(sp)
bltz v0, 0x4a74
nop
lw t9, -sym.imp.malloc(gp)
lw s3, 0x80(sp)
jalr t9
addiu a0, zero, 0x80
lw gp, 0x18(sp)
move s1, v0
bnez v0, 0x4980
move s6, v0
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
addiu v1, zero, 0xc
lw gp, 0x18(sp)
b 0x4a74
sw v1, (v0)
lw t9, -sym.imp.memset(gp)
addiu a2, zero, 0x80
move a0, v0
jalr t9
move a1, zero
lw gp, 0x18(sp)
addiu s7, s1, 8
lw t9, -sym.imp.strcpy(gp)
addiu s0, s1, 0x28
move a0, s0
move a1, s2
sw s7, 8(s1)
jalr t9
sw s7, 0xc(s1)
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.malloc(gp)
nop
jalr t9
addiu a0, s3, 0x28
lw gp, 0x18(sp)
beqz v0, 0x4a5c
sw v0, 0x7c(s1)
lw t9, -sym.imp.strcpy(gp)
move a0, v0
jalr t9
move a1, s2
lw gp, 0x18(sp)
lw v0, 0x7c(s1)
lw t9, -sym.imp.memcpy(gp)
sw s3, 0x20(v0)
move a0, s0
move a1, s2
addiu a2, zero, 0x54
jalr t9
sw fp, (s1)
lw v0, 0x78(s1)
lw a3, 0x7c(s1)
lw gp, 0x18(sp)
sw v0, 0x20(a3)
lw v0, 0x78(s1)
lw t9, -sym.imp.getsockopt(gp)
addiu v0, v0, 0x28
sw v0, 0x20(sp)
[*] Function strcpy used 12 times libip4tc.so.0.0.0
