[*] Binary protection state of libxt_tcpmss.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH Symbols
[*] Function printf tear down of libxt_tcpmss.so
lw a0, -0x7fe8(gp)
lw t9, -sym.imp.xtables_register_match(gp)
nop
jr t9
addiu a0, a0, 0x1040
lui gp, 2
addiu gp, gp, -0x78b0
addu gp, gp, t9
addiu sp, sp, -0x28
sw ra, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
addiu s0, a1, 0x20
lbu v0, 4(s0)
nop
bnez v0, 0x970
move s1, a1
lw v0, -0x7fdc(gp)
b 0x97c
addiu a1, v0, 0xe6c
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0xe60
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, str._s__mss
lw gp, 0x10(sp)
lhu a1, 0x20(s1)
lhu a2, 2(s0)
lw t9, -sym.imp.printf(gp)
bne a1, a2, 0x9c4
nop
lw a0, -0x7fdc(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, a0, 0xe70
jr t9
addiu sp, sp, 0x28
lw a0, -0x7fdc(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, a0, str._u:_u
jr t9
addiu sp, sp, 0x28
lui gp, 2
addiu gp, gp, -0x7960
addu gp, gp, t9
addiu sp, sp, -0x28
sw ra, 0x24(sp)
sw s1, 0x20(sp)
sw s0, 0x1c(sp)
sw gp, 0x10(sp)
addiu s0, a1, 0x20
lbu v0, 4(s0)
nop
bnez v0, 0xa20
move s1, a1
lw v0, -0x7fdc(gp)
b 0xa2c
addiu a1, v0, 0xe6c
lw v0, -0x7fdc(gp)
nop
addiu a1, v0, 0xe7c
lw a0, -0x7fdc(gp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
addiu a0, a0, str.tcpmss_match__s
lw gp, 0x10(sp)
lhu a1, 0x20(s1)
lhu a2, 2(s0)
lw t9, -sym.imp.printf(gp)
bne a1, a2, 0xa74
nop
lw a0, -0x7fdc(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, a0, 0xe70
jr t9
addiu sp, sp, 0x28
lw a0, -0x7fdc(gp)
lw ra, 0x24(sp)
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
addiu a0, a0, str._u:_u
jr t9
addiu sp, sp, 0x28
lui gp, 2
addiu gp, gp, -0x7a10
addu gp, gp, t9
addiu sp, sp, -0x30
[*] Function printf used 4 times libxt_tcpmss.so