[*] Binary protection state of libip6tc.so.0.0.0
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH Symbols
[*] Function strcpy tear down of libip6tc.so.0.0.0
addiu v0, a0, 0x28
addu s1, v0, v1
lhu v1, (s1)
addiu v0, zero, 0x28
move s2, a0
beq v1, v0, 0x1518
move s3, a1
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
addiu v1, zero, 0x16
sw v1, (v0)
lw gp, 0x10(sp)
b 0x155c
move v0, zero
lw t9, -sym.imp.memset(gp)
addiu s0, s1, 2
move a0, s0
move a1, zero
jalr t9
addiu a2, zero, 0x1e
lw gp, 0x10(sp)
move a0, s0
lw a1, -0x7fdc(gp)
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a1, a1, 0x5610
lw gp, 0x10(sp)
sw s3, 0x20(s1)
sw zero, 0x1c(s2)
addiu v0, zero, 1
lw ra, 0x2c(sp)
lw s3, 0x28(sp)
lw s2, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 2
addiu gp, gp, -0x3a48
addu gp, gp, t9
addiu sp, sp, -0x20
sw ra, 0x1c(sp)
sw s0, 0x18(sp)
--
addiu v0, v0, 0x28
lw t9, -sym.imp.malloc(gp)
sw v0, 0x24(sp)
jalr t9
move a0, v0
lw gp, 0x18(sp)
bnez v0, 0x1828
move s5, v0
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
addiu v1, zero, 0xc
lw gp, 0x18(sp)
b 0x1e0c
sw v1, (v0)
lw t9, -sym.imp.memset(gp)
lw a2, 0x24(sp)
move a0, v0
jalr t9
move a1, zero
lw a0, 0x58(sp)
lw gp, 0x18(sp)
addiu a0, a0, 0x28
sw a0, 0x28(sp)
lw t9, -sym.imp.strcpy(gp)
lw a1, 0x28(sp)
jalr t9
move a0, s3
lw v1, 0x58(sp)
lw a0, 0x58(sp)
lw v0, 0x74(v1)
lw v1, 0x48(v1)
lw gp, 0x18(sp)
sw s1, 0x28(s3)
sw v0, 0x54(s3)
sw v1, 0x20(s3)
sw fp, 0x24(s3)
lw s4, 8(a0)
b 0x1a58
addiu s7, s3, 0x60
lw v0, 0x28(s4)
lw v1, 0x60(s4)
bnez v0, 0x18e8
addu s0, s7, v1
lw a1, -0x7fdc(gp)
lw t9, -sym.imp.strcpy(gp)
addiu v1, zero, 0xe8
addiu v0, zero, 0xa8
sh v1, 0x8e(s0)
addiu a0, s0, 0xaa
addiu a1, a1, str.ERROR
jalr t9
sh v0, 0x8c(s0)
lw gp, 0x18(sp)
addiu a0, zero, 0x40
lw t9, -sym.imp.strcpy(gp)
sh a0, 0xa8(s0)
addiu a1, s4, 8
jalr t9
addiu a0, s0, 0xc8
lw gp, 0x18(sp)
b 0x1914
addiu v0, s4, 0x54
addiu v0, v0, 9
sll v0, v0, 2
addu v0, s3, v0
sw v1, 4(v0)
lw v0, 0x28(s4)
lw v1, 0x68(s4)
addiu v0, v0, 0xf
sll v0, v0, 2
addu v0, s3, v0
sw v1, (v0)
addiu v0, s4, 0x54
lw s2, 0x54(s4)
b 0x19d0
sw v0, 0x20(sp)
lw v0, 0x1c(s2)
nop
bne v0, v1, 0x198c
addiu s0, s2, 0x28
lhu v0, 0xb4(s2)
nop
addu s0, s0, v0
lw t9, -sym.imp.memset(gp)
addiu s1, s0, 2
move a0, s1
move a1, zero
jalr t9
addiu a2, zero, 0x1e
lw gp, 0x18(sp)
move a0, s1
lw a1, -0x7fdc(gp)
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a1, a1, 0x5610
lw v0, 0x20(s2)
lw gp, 0x18(sp)
lw v0, 0x60(v0)
nop
addiu v0, v0, 0xe8
b 0x19b0
sw v0, 0x20(s0)
addiu a0, zero, 2
bne v0, a0, 0x19b0
nop
lw v0, 0x24(s2)
lw a0, 0x18(s2)
lhu v1, 0xb4(s2)
addu v0, v0, a0
addu v1, s2, v1
sw v0, 0x48(v1)
lw a0, 0x18(s2)
lw t9, -sym.imp.memcpy(gp)
lw a2, 0x24(s2)
addiu a1, s2, 0x28
jalr t9
addu a0, s7, a0
lw gp, 0x18(sp)
lw s2, (s2)
lw v0, 0x20(sp)
nop
bne s2, v0, 0x1920
addiu v1, zero, 3
lw v0, 0x68(s4)
lw a1, -0x7fdc(gp)
addu s0, s7, v0
lw t9, -sym.imp.strcpy(gp)
addiu v1, zero, 0xa8
addiu a0, zero, 0xd0
sh a0, 0x8e(s0)
sh v1, 0x8c(s0)
addiu a0, s0, 0xaa
jalr t9
addiu a1, a1, 0x5610
addiu v0, zero, 0x28
lw gp, 0x18(sp)
sh v0, 0xa8(s0)
lw v0, 0x28(s4)
nop
beqz v0, 0x1a34
addiu v1, zero, -5
lw v0, 0x30(s4)
b 0x1a38
sw v0, 0xc8(s0)
sw v1, 0xc8(s0)
lw t9, -sym.imp.memcpy(gp)
addiu a1, s4, 0x38
addiu a0, s0, 0x98
jalr t9
addiu a2, zero, 0x10
lw gp, 0x18(sp)
lw s4, (s4)
nop
bne s4, s6, 0x188c
addiu v0, zero, 0xa8
lw s0, 0x28(s3)
nop
addiu s0, s0, -0xe8
addu s0, s7, s0
lw s1, -0x7fdc(gp)
sh v0, 0x8c(s0)
addiu v0, zero, 0xe8
lw t9, -sym.imp.strcpy(gp)
sh v0, 0x8e(s0)
addiu v0, zero, 0x40
addiu a0, s0, 0xaa
addiu a1, s1, str.ERROR
jalr t9
sh v0, 0xa8(s0)
lw gp, 0x18(sp)
addiu a0, s0, 0xc8
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
addiu a1, s1, str.ERROR
lw gp, 0x18(sp)
lw v0, 0x28(s3)
lw v1, 0x58(sp)
lw t9, -sym.imp.setsockopt(gp)
lw a0, (v1)
addiu v0, v0, 0x60
sw v0, 0x10(sp)
addiu a1, zero, 0x29
addiu a2, zero, 0x40
jalr t9
move a3, s3
lw gp, 0x18(sp)
bltz v0, 0x1df4
nop
lw t9, -sym.imp.strcpy(gp)
lw a1, 0x28(sp)
jalr t9
move a0, s5
lw a0, 0x58(sp)
sw fp, 0x20(s5)
lw gp, 0x18(sp)
lw s1, 8(a0)
addiu fp, zero, 1
addiu s6, zero, 2
b 0x1d74
addiu s7, zero, 3
lw v0, 0x28(s1)
nop
beqz v0, 0x1c3c
nop
lw v0, 0x48(s1)
nop
beq v0, fp, 0x1b78
nop
beqz v0, 0x1b58
--
lw v1, -sym.ip6tc_init(gp)
lw v0, -0x7fe8(gp)
lw t9, -sym.imp.strlen(gp)
sw v1, 0x5c70(v0)
jalr t9
sw a0, 0xb8(sp)
sltiu v0, v0, 0x20
lw gp, 0x18(sp)
bnez v0, 0x4c0c
addiu a0, zero, 0xa
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
move s6, zero
addiu v1, zero, 0x16
lw gp, 0x18(sp)
b 0x5238
sw v1, (v0)
lw t9, -sym.imp.socket(gp)
addiu a1, zero, 3
jalr t9
addiu a2, zero, 0xff
lw gp, 0x18(sp)
bltz v0, 0x5234
move fp, v0
lw t9, -sym.imp.strcpy(gp)
addiu s2, sp, 0x30
addiu v0, zero, 0x54
lw a1, 0xb8(sp)
move a0, s2
jalr t9
sw v0, 0x24(sp)
lw gp, 0x18(sp)
addiu v0, sp, 0x24
lw t9, -sym.imp.getsockopt(gp)
sw v0, 0x10(sp)
move a0, fp
addiu a1, zero, 0x29
addiu a2, zero, 0x40
jalr t9
move a3, s2
lw gp, 0x18(sp)
bltz v0, 0x4da8
nop
lw t9, -sym.imp.malloc(gp)
lw s3, 0x80(sp)
jalr t9
addiu a0, zero, 0x80
lw gp, 0x18(sp)
move s1, v0
bnez v0, 0x4cb4
move s6, v0
lw t9, -sym.imp.__errno_location(gp)
nop
jalr t9
nop
addiu v1, zero, 0xc
lw gp, 0x18(sp)
b 0x4da8
sw v1, (v0)
lw t9, -sym.imp.memset(gp)
addiu a2, zero, 0x80
move a0, v0
jalr t9
move a1, zero
lw gp, 0x18(sp)
addiu s7, s1, 8
lw t9, -sym.imp.strcpy(gp)
addiu s0, s1, 0x28
move a0, s0
move a1, s2
sw s7, 8(s1)
jalr t9
sw s7, 0xc(s1)
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.malloc(gp)
nop
jalr t9
addiu a0, s3, 0x28
lw gp, 0x18(sp)
beqz v0, 0x4d90
sw v0, 0x7c(s1)
lw t9, -sym.imp.strcpy(gp)
move a0, v0
jalr t9
move a1, s2
lw gp, 0x18(sp)
lw v0, 0x7c(s1)
lw t9, -sym.imp.memcpy(gp)
sw s3, 0x20(v0)
move a0, s0
move a1, s2
addiu a2, zero, 0x54
jalr t9
sw fp, (s1)
lw v0, 0x78(s1)
lw a3, 0x7c(s1)
lw gp, 0x18(sp)
sw v0, 0x20(a3)
lw v0, 0x78(s1)
lw t9, -sym.imp.getsockopt(gp)
addiu v0, v0, 0x28
sw v0, 0x20(sp)
[*] Function strcpy used 12 times libip6tc.so.0.0.0
