[*] Binary protection state of nsbbox

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	No RELRO       No Canary found   NX disabled  No PIE       No RPATH     No RUNPATH   No Symbols

[*] Function sprintf tear down of nsbbox

lui v0, 0x42

lw v1, -0x3168(v0)

lui v0, 0x42

lw v0, -0x3164(v0)

lw t9, -sym.imp.printf(gp)

sw a0, 0x14(sp)

lui a0, 0x41

sw v1, 0x1c(sp)

sw v0, 0x20(sp)

sw s7, 0x10(sp)

sw s2, 0x18(sp)

addiu a0, a0, -0x4b20

move a1, s6

jalr t9

move a3, s5

lw gp, 0x28(sp)

beqz s1, 0x404798

addiu s4, sp, 0x70

lw t9, -sym.imp.memset(gp)

move a0, s4

move a1, zero

jalr t9

addiu a2, zero, 0x20

lw gp, 0x28(sp)

addiu s1, sp, 0x4c

lw t9, -sym.imp.sprintf(gp)

addiu s3, zero, 1

lui fp, 0x41

move a2, s2

move a0, s1

addiu a1, fp, -0x43a4

sw zero, 0x74(sp)

sw s3, 0x78(sp)

sw s3, 0x70(sp)

sw zero, 0x4c(sp)

jalr t9

sh zero, 4(s1)

lw gp, 0x28(sp)

addiu s2, sp, 0x48

lw t9, -sym.imp.getaddrinfo(gp)

move a0, zero

move a1, s1

move a2, s4

jalr t9

move a3, s2

lw gp, 0x28(sp)

--

lw a2, 0x10(v0)

lw a1, 0x14(v0)

jalr t9

move a0, s0

lw gp, 0x28(sp)

bnez v0, 0x404838

lui a0, 0x41

lw t9, -sym.imp.freeaddrinfo(gp)

lw a0, 0x48(sp)

jalr t9

nop

lw gp, 0x28(sp)

move a0, s0

lw t9, -sym.imp.listen(gp)

nop

jalr t9

addiu a1, zero, 3

lw gp, 0x28(sp)

move a0, s4

lw t9, -sym.imp.memset(gp)

move a1, zero

jalr t9

addiu a2, zero, 0x20

lw gp, 0x28(sp)

addiu a1, fp, -0x43a4

lw t9, -sym.imp.sprintf(gp)

move a0, s1

addiu a2, zero, 0x7b

sw s3, 0x78(sp)

sw zero, 0x74(sp)

sw zero, (s1)

jalr t9

sh zero, 4(s1)

lw gp, 0x28(sp)

move a0, s5

lw t9, -sym.imp.getaddrinfo(gp)

move a1, s1

move a2, s4

jalr t9

move a3, s2

lw gp, 0x28(sp)

beqz v0, 0x40475c

nop

lw t9, -sym.imp.gai_strerror(gp)

nop

jalr t9

[*] Function sprintf used 2 times nsbbox