[*] Binary protection state of servd

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	No RELRO       No Canary found   NX disabled  No PIE       No RPATH     No RUNPATH   No Symbols

[*] Function sprintf tear down of servd

jalr t9

sw a2, 0x18(sp)

lw gp, 0x10(sp)

lw ra, 0x24(sp)

nop

jr ra

addiu sp, sp, 0x28

nop

nop

jr ra

move v0, zero

sw a2, 8(sp)

jr ra

sw a3, 0xc(sp)

lui gp, 0x42

addiu sp, sp, -0x78

addiu gp, gp, 0x3110

sw ra, 0x74(sp)

sw s5, 0x70(sp)

sw s4, 0x6c(sp)

sw s3, 0x68(sp)

sw s2, 0x64(sp)

sw s1, 0x60(sp)

sw s0, 0x5c(sp)

sw gp, 0x10(sp)

lw t9, -sym.imp.sprintf(gp)

addiu s0, sp, 0x18

move s5, a0

lui a1, 0x41

move a0, s0

addiu a1, a1, -0x5f34

jalr t9

move a2, s5

lw gp, 0x10(sp)

lui a1, 0x41

lw t9, -sym.xs_fopen(gp)

move a0, s0

jalr t9

addiu a1, a1, -0x5f24

lw gp, 0x10(sp)

move s2, v0

beqz v0, 0x401b1c

move s0, zero

lw t9, -sym.sobj_new(gp)

nop

jalr t9

--

move a1, zero

jal 0x4038c0

move a0, s0

lw gp, 0x10(sp)

beqz s0, 0x403fec

nop

lw s0, (s0)

b 0x403ff4

nop

lw s0, -0x4f30(s1)

nop

beq s0, s2, 0x404008

lui v0, 0x42

bnez s0, 0x403fa0

nop

lui v0, 0x42

lw v0, -0x4f40(v0)

nop

bnez v0, 0x404020

lui v0, 0x41

b 0x404028

addiu a2, v0, -0x55e0

lui v0, 0x41

addiu a2, v0, -0x5f54

addiu s0, sp, 0x18

lw t9, -sym.imp.sprintf(gp)

lui a1, 0x41

addiu a1, a1, -0x55dc

jalr t9

move a0, s0

lw gp, 0x10(sp)

nop

lw t9, -sym.imp.strlen(gp)

nop

jalr t9

move a0, s0

lw gp, 0x10(sp)

move a0, s3

lw t9, -sym.susock_send(gp)

move a1, s0

addiu a2, v0, 1

jalr t9

addiu a3, zero, 0x4000

lw ra, 0x6c(sp)

lw gp, 0x10(sp)

lw s3, 0x68(sp)

--

nop

lw t9, -sym.imp.strcmp(gp)

lui a1, 0x41

move a0, s0

jalr t9

addiu a1, a1, -0x5594

lw gp, 0x10(sp)

bnez v0, 0x4044e0

nop

lui v0, 0x42

addiu a0, v0, -0x4f28

lw v1, -0x4f28(v0)

move a2, zero

move v0, zero

bnez v0, 0x4044a8

nop

b 0x4044b0

move v0, v1

lw v0, (v0)

nop

beq v0, a0, 0x4044c4

nop

bnez v0, 0x404498

addiu a2, a2, 1

addiu a2, a2, -1

lw t9, -sym.imp.sprintf(gp)

lui a1, 0x41

addiu a1, a1, -0x5598

jalr t9

addiu a0, sp, 0x18

lw gp, 0x10(sp)

nop

lw t9, -sym.imp.strlen(gp)

addiu s0, sp, 0x18

jalr t9

move a0, s0

lw gp, 0x10(sp)

b 0x4045c8

nop

addiu a1, a1, -0x5ad4

jalr t9

move a0, s0

lw gp, 0x10(sp)

bnez v0, 0x40452c

addiu a1, s2, -0x5a48

lw a1, 8(s3)

--

lw s0, 0x14(s2)

nop

beq s0, s5, 0x404fcc

nop

bnez s0, 0x404f20

nop

bnez s3, 0x405130

nop

lw v0, 0xc(s2)

nop

bnez v0, 0x4050dc

move s0, zero

b 0x405130

nop

lw a1, 0x10(s0)

nop

beqz a1, 0x4050dc

addiu v1, zero, 0x40

lb v0, (a1)

lw a3, 0x10(s2)

bne v0, v1, 0x405040

nop

beqz a3, 0x405028

addiu a1, a1, 1

move a2, a1

lw t9, -sym.imp.sprintf(gp)

move a0, s4

b 0x4050b4

move a1, s7

lw t9, -sym.imp.strcpy(gp)

nop

jalr t9

move a0, s4

b 0x4050bc

nop

beqz a3, 0x405088

move a2, a1

lw t9, -sym.imp.sprintf(gp)

move a0, s4

jalr t9

move a1, s7

lw gp, 0x18(sp)

lw v0, 0x10(s2)

lw a2, 8(s2)

lw a3, 0xc(s0)

lw a0, (s6)

lw t9, -sym.imp.fprintf(gp)

lui a1, 0x41

sw v0, 0x10(sp)

jalr t9

addiu a1, a1, -0x5404

b 0x4050bc

nop

lw t9, -sym.imp.strcpy(gp)

nop

jalr t9

move a0, s4

lw gp, 0x18(sp)

[*] Function sprintf used 5 times servd