[*] Binary protection state of xmldb
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of xmldb
addiu v1, v0, -0x68
lui v0, 0x43
lw v0, 0x3cd0(v0)
nop
bnez v0, 0x402fb4
lui v1, 0x43
jal 0x40273c
addiu a0, zero, -1
lw gp, 0x10(sp)
lui v1, 0x43
lw v0, 0x3ce0(v1)
nop
bnez v0, 0x402fd0
lui s1, 0x43
lui v0, 0x42
addiu v0, v0, 0x1c10
sw v0, 0x3ce0(v1)
lw v0, 0x3cd8(s1)
nop
bnez v0, 0x403014
lui a2, 0x42
lui v0, 0x43
lw a2, 0x3ce0(v0)
lui v0, 0x43
lui s0, 0x43
lw t9, -sym.imp.sprintf(gp)
lw a3, 0x3cd0(v0)
lui a1, 0x42
addiu a0, s0, 0x3ce4
addiu a1, a1, 0x1d10
jalr t9
addiu s0, s0, 0x3ce4
sw s0, 0x3cd8(s1)
lui a2, 0x42
lui a0, 0x42
lui a1, 0x42
addiu a2, a2, 0x1b54
addiu a0, a0, 0x1b44
jal 0x402e18
addiu a1, a1, 0x1ac0
lui v0, 0x43
lw a1, 0x3cd0(v0)
lui a0, 0x42
jal 0x402e18
addiu a0, a0, 0x1d1c
lui v0, 0x43
--
lw s0, (s0)
lw t9, -sym.imp.strcmp(gp)
bne s0, fp, 0x405b2c
move a1, s6
b 0x405b64
nop
b 0x405af0
addiu s4, s4, 1
beqz s2, 0x405b80
nop
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s2
lw gp, 0x10(sp)
beqz s5, 0x405ba0
addiu v0, zero, -1
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s5
lw gp, 0x10(sp)
addiu v0, zero, -1
beq s4, v0, 0x405cac
lui s0, 0x43
lw t9, -sym.imp.sprintf(gp)
lui a1, 0x42
addiu a0, s0, 0x4924
addiu a1, a1, 0x1d5c
jalr t9
move a2, s4
lw gp, 0x10(sp)
b 0x405cb0
addiu s0, s0, 0x4924
move a1, s1
move a2, zero
jal sym.xmldb_find_node
addiu a3, zero, 1
lw gp, 0x10(sp)
beqz v0, 0x405cac
move s0, v0
lui a1, 0x42
addiu a1, a1, 0x254c
jal 0x404aa4
move a0, v0
lw gp, 0x10(sp)
--
lw s0, 0xc(s4)
move s2, v0
addiu v0, s0, -3
sltiu v0, v0, 2
lw gp, 0x18(sp)
beqz v0, 0x40cb4c
addiu v0, s4, 0x18
lw t9, -sym.imp.atoll(gp)
nop
jalr t9
move a0, s2
move a1, v0
addiu v0, zero, 3
lw gp, 0x18(sp)
bne s0, v0, 0x40cb2c
move a2, v1
addiu v1, a1, 1
sltu v0, v1, a1
b 0x40cb40
addu a3, v0, a2
addiu a0, a1, -1
sltu v1, a0, a1
addiu v0, a2, -1
addu a3, v1, v0
move v1, a0
lw t9, -sym.imp.sprintf(gp)
b 0x40cc10
move a2, v1
lw a1, 0xf4(sp)
move a0, s5
move a2, s7
move a3, s3
jal 0x40d858
sw v0, 0x10(sp)
lw gp, 0x18(sp)
bltz v0, 0x40d3f4
move s1, v0
lw v0, 0xc(s4)
nop
bnez v0, 0x40cb90
move a1, s3
lw t9, -sym.sobj_move(gp)
lw a0, 0xfc(sp)
b 0x40cc30
nop
lw t9, -sym.imp.atoll(gp)
--
move a0, s3
lw t9, -sym.sobj_get_string(gp)
move s1, v1
jalr t9
move s0, v0
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.atoll(gp)
nop
jalr t9
move a0, v0
lw a0, 0xc(s4)
move a1, v0
addiu v0, zero, 1
lw gp, 0x18(sp)
bne a0, v0, 0x40cbf8
addu a0, a1, s0
addu v1, v1, s1
sltu v0, a0, a1
b 0x40cc08
addu a3, v0, v1
subu a0, s0, a1
subu v1, s1, v1
sltu v0, s0, a0
subu a3, v1, v0
lw t9, -sym.imp.sprintf(gp)
move a2, a0
lw a0, 0xc4(sp)
lui a1, 0x42
jalr t9
addiu a1, a1, 0x2918
lw gp, 0x18(sp)
lw a0, 0xfc(sp)
lw t9, -sym.sobj_add_string(gp)
lw a1, 0xc4(sp)
jalr t9
nop
lw s1, 0x14(s4)
lw gp, 0x18(sp)
bnez s1, 0x40cc4c
nop
move s1, s7
lw t9, -sym.sobj_get_string(gp)
lw a0, 0xfc(sp)
lw s0, 0x10(s4)
jalr t9
--
addiu v1, s4, 0x14
lw t9, -sym.xmldb_anchor_node(gp)
lw a0, 0xb4(sp)
jalr t9
nop
lw gp, 0x18(sp)
move a0, fp
lw t9, -sym.sobj_get_string(gp)
nop
jalr t9
move s0, v0
lw gp, 0x18(sp)
move a0, s0
lw t9, -sym.xmldb_find_node(gp)
move a1, v0
move a2, zero
jalr t9
addiu a3, zero, 1
lw gp, 0x18(sp)
move s3, v0
addiu v1, s4, 0x14
sw v1, 0xb0(sp)
move s6, zero
b 0x40d0b4
move s1, zero
lw t9, -sym.imp.sprintf(gp)
lw a0, 0xc0(sp)
addiu s6, s6, 1
addiu a1, a1, 0x1d5c
jalr t9
move a2, s6
lw a0, 0xc(s5)
lw gp, 0x18(sp)
beqz a0, 0x40cfa0
nop
lw t9, -sym.xmldb_del_anchor(gp)
nop
jalr t9
nop
lw gp, 0x18(sp)
nop
lw t9, -sym.xmldb_set_anchor(gp)
nop
jalr t9
move a0, s3
lw a3, 0xc0(sp)
--
move s0, v0
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.atoll(gp)
nop
jalr t9
move a0, v0
addiu a0, s3, -0x25
andi a1, a0, 0xff
sltiu a0, a1, 0xb
lw gp, 0x18(sp)
beqz a0, 0x40dbbc
move a3, v0
lui a0, 0x42
sll v0, a1, 2
addiu a0, a0, 0x2a04
addu v0, a0, v0
lw v0, (v0)
nop
addu v0, v0, gp
jr v0
nop
addu a2, a3, s0
addu v0, v1, s1
sltu a3, a2, a3
lw t9, -sym.imp.sprintf(gp)
b 0x40dba8
addu a3, a3, v0
subu a2, s0, a3
subu v0, s1, v1
sltu a3, s0, a2
lw t9, -sym.imp.sprintf(gp)
b 0x40dba8
subu a3, v0, a3
mult v1, s0
lw t9, -sym.imp.sprintf(gp)
mflo v0
nop
nop
mult s1, a3
move a0, s6
mflo v1
nop
nop
multu a3, s0
addu v0, v0, v1
mfhi a3
mflo a2
b 0x40dbac
addu a3, v0, a3
bgtz v1, 0x40daf0
nop
bnez v1, 0x40dafc
nop
beqz a3, 0x40dafc
nop
--
lw t9, -sym.client_printf(gp)
lw a0, (v1)
lui a1, 0x42
jalr t9
addiu a1, a1, 0x2964
lw gp, 0x18(sp)
lw v0, 0xc8(sp)
lw t9, -sym.client_printf(gp)
lw a0, (v0)
lui a1, 0x42
lui a2, 0x42
addiu a1, a1, 0x2610
jalr t9
addiu a2, a2, 0x25d0
lw gp, 0x18(sp)
b 0x40dbbc
addiu s5, zero, -1
lw t9, -sym.__moddi3(gp)
move a2, a3
move a0, s0
move a3, v1
jalr t9
move a1, s1
lw gp, 0x18(sp)
move a2, v0
lw t9, -sym.imp.sprintf(gp)
move a3, v1
move a0, s6
jalr t9
move a1, fp
lw gp, 0x18(sp)
nop
lw t9, -sym.sobj_free(gp)
nop
jalr t9
move a0, s7
lw gp, 0x18(sp)
move a0, s7
lw t9, -sym.sobj_add_string(gp)
move a1, s6
jalr t9
nop
lw gp, 0x18(sp)
lb s3, 0x1c(s2)
bltz s5, 0x40dc08
nop
--
jalr t9
move a1, v0
lw gp, 0x18(sp)
beqz v0, 0x411778
move s0, v0
lw t9, -sym.sobj_get_string(gp)
nop
jalr t9
move a0, s6
lw gp, 0x18(sp)
move a0, v0
lw t9, -sym.imp.fputs(gp)
nop
jalr t9
move a1, s0
lw gp, 0x18(sp)
move s1, v0
lw t9, -sym.imp.fclose(gp)
nop
jalr t9
move a0, s0
lw gp, 0x18(sp)
bgez s1, 0x41177c
nop
move s1, zero
lw t9, -sym.imp.sprintf(gp)
addiu s0, sp, 0x20
lui a1, 0x42
move a0, s0
addiu a1, a1, 0x1d5c
jalr t9
move a2, s1
lw gp, 0x18(sp)
lw a0, 0x94(sp)
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a1, s0
lw gp, 0x18(sp)
b 0x4117c4
addiu s0, zero, 3
addiu s0, zero, -1
move s2, zero
lw t9, -sym.sobj_del(gp)
nop
jalr t9
--
b 0x413c24
nop
lw t9, -sym.expand_operand_list(gp)
sw s0, 0x10(sp)
move a0, s2
move a1, s3
move a2, s4
jalr t9
move a3, v0
lw gp, 0x18(sp)
bltz v0, 0x413c4c
addiu s0, zero, -1
lw t9, -sym.sobj_get_string(gp)
nop
jalr t9
move a0, s1
lw gp, 0x18(sp)
move a0, v0
lw t9, -sym.imp.atoi(gp)
nop
jalr t9
addiu s0, sp, 0x20
lw gp, 0x18(sp)
negu v0, v0
addiu a2, zero, 1
lw t9, -sym.imp.sprintf(gp)
sllv a2, a2, v0
lui a1, 0x42
move a0, s0
addiu a1, a1, 0x2da0
jalr t9
addiu a2, a2, -1
lw gp, 0x18(sp)
move a1, s0
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a0, s5
lw gp, 0x18(sp)
b 0x413c4c
addiu s0, zero, 3
lw ra, 0x5c(sp)
move v0, s0
lw s5, 0x58(sp)
lw s4, 0x54(sp)
lw s3, 0x50(sp)
--
addiu a3, zero, 0x1f
addiu a1, zero, 1
b 0x413e30
addiu v1, zero, 0x20
beq a2, v1, 0x413e48
nop
subu v0, a3, a2
sllv v0, a1, v0
and v0, v0, a0
bnez v0, 0x413e28
addiu a2, a2, 1
addiu a2, a2, -1
negu v1, a2
addiu v0, zero, 1
sllv v0, v0, v1
addiu v0, v0, -1
and v0, v0, a0
beqz v0, 0x413e7c
lui a1, 0x42
lw t9, -sym.sobj_free(gp)
nop
jalr t9
move a0, s5
b 0x413ea8
nop
lw t9, -sym.imp.sprintf(gp)
addiu s0, sp, 0x24
addiu a1, a1, 0x2da0
jalr t9
move a0, s0
lw gp, 0x18(sp)
move a0, s5
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a1, s0
lw gp, 0x18(sp)
b 0x413edc
addiu s0, zero, 3
lw ra, 0x64(sp)
move v0, s0
lw s5, 0x60(sp)
lw s4, 0x5c(sp)
lw s3, 0x58(sp)
lw s2, 0x54(sp)
lw s1, 0x50(sp)
--
lw t9, -sym.sobj_get_string(gp)
lw s0, 0x20(sp)
jalr t9
move a0, s4
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.atoi(gp)
nop
jalr t9
move a0, v0
lw gp, 0x18(sp)
beqz v0, 0x414194
addiu a0, zero, -1
negu v1, v0
addiu v0, zero, 1
sllv v0, v0, v1
addiu a0, v0, -1
srl v0, s0, 0x18
sll a2, s0, 0x18
srl v1, s0, 8
andi v1, v1, 0xff00
or a2, a2, v0
andi v0, s0, 0xff00
or a2, a2, v1
sll v0, v0, 8
lw t9, -sym.imp.sprintf(gp)
addiu s0, sp, 0x24
or a2, a2, v0
lui a1, 0x42
and a2, a0, a2
addiu a1, a1, 0x2da0
jalr t9
move a0, s0
lw gp, 0x18(sp)
move a1, s0
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a0, s7
lw gp, 0x18(sp)
addiu s0, zero, 3
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
--
addu v0, t4, t2
sb t1, 2(v0)
addiu t2, t2, 1
lb v0, (t0)
bne t2, t3, 0x4163b8
nop
bgez v0, 0x416474
move a1, zero
lw t9, -sym.sobj_free(gp)
nop
jalr t9
move a0, s5
b 0x4164e8
nop
lw t9, -sym.imp.memset(gp)
addiu s0, sp, 0x38
move a0, s0
jalr t9
addiu a2, zero, 0x2e
lw gp, 0x20(sp)
lbu a1, 0x2f(sp)
lb a2, 0x2a(sp)
lbu a0, 0x2e(sp)
lbu v0, 0x2c(sp)
lbu v1, 0x2d(sp)
lw t9, -sym.imp.sprintf(gp)
sw a1, 0x1c(sp)
lbu a3, 0x2b(sp)
ori a2, a2, 2
lui a1, 0x42
sw a0, 0x18(sp)
addiu a1, a1, 0x2ec4
move a0, s0
sw v0, 0x10(sp)
sw v1, 0x14(sp)
jalr t9
andi a2, a2, 0xff
lw gp, 0x20(sp)
move a0, s5
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a1, s0
lw gp, 0x20(sp)
b 0x41651c
addiu s0, zero, 3
--
sw gp, 0x10(sp)
lw t9, -sym.imp.strlen(gp)
move s1, a1
jalr t9
move s0, a0
sltiu v1, v0, 0x2e
lw gp, 0x10(sp)
bnez v1, 0x41657c
move s2, v0
addiu s2, zero, 0x2e
lw t9, -sym.imp.strncmp(gp)
lui a1, 0x42
addiu a1, a1, 0x2ee4
move a0, s0
jalr t9
addiu a2, zero, 2
lw gp, 0x10(sp)
bnez v0, 0x4165b4
addiu v0, zero, 0x3a
lw t9, -sym.imp.memcpy(gp)
move a0, s1
move a1, s0
b 0x4165e0
move a2, s2
lbu v1, (s0)
lw t9, -sym.imp.sprintf(gp)
bne v1, v0, 0x4165d0
lui a1, 0x42
move a0, s1
b 0x4165dc
addiu a1, a1, 0x2ee8
lui a1, 0x42
move a0, s1
addiu a1, a1, 0x2eec
move a2, s0
lw ra, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
jr t9
addiu sp, sp, 0x28
lui gp, 0x44
addiu sp, sp, -0x180
addiu gp, gp, -0x4690
sw ra, 0x17c(sp)
sw fp, 0x178(sp)
--
addiu a2, zero, 0x2e
lw gp, 0x18(sp)
move a1, s2
lw t9, -sym.imp.inet_ntop(gp)
move a2, s0
addiu a0, zero, 0xa
jalr t9
addiu a3, zero, 0x2e
lw gp, 0x18(sp)
bnez v0, 0x417008
nop
b 0x416e90
nop
addu s7, s3, s4
sltiu v0, s7, 0x81
beqz v0, 0x416e90
nop
lw t9, -sym.imp.memset(gp)
addiu s0, sp, 0xb0
move a0, s0
addiu a1, zero, 0xff
jalr t9
addiu a2, zero, 0x2e
lw gp, 0x18(sp)
lui a1, 0x42
lw t9, -sym.imp.sprintf(gp)
move a0, s0
addiu a1, a1, 0x2e70
move a2, s2
jalr t9
move a3, s1
addu v0, sp, v0
lw gp, 0x18(sp)
addiu v1, sp, 0x70
sb zero, 0xb0(v0)
addiu v0, sp, 0x60
sb zero, (v0)
addiu v0, v0, 1
bne v0, v1, 0x416cc8
move a1, zero
lw t9, -sym.imp.memset(gp)
addiu s1, sp, 0xe0
move a0, s1
jalr t9
addiu a2, zero, 0x2e
lw gp, 0x18(sp)
--
nop
lw t9, -sym.expand_operand_list(gp)
sw s0, 0x10(sp)
move a0, s1
move a1, s4
move a2, s5
jalr t9
move a3, v0
lw gp, 0x18(sp)
bltz v0, 0x417600
addiu s0, zero, -1
lw t9, -sym.sobj_free(gp)
nop
jalr t9
move a0, s3
lui v0, 0x42
lw gp, 0x18(sp)
addiu s4, v0, 0x3020
move s0, zero
b 0x4175a8
addiu s1, sp, 0x20
jalr t9
nop
lw gp, 0x18(sp)
move a2, v0
lw t9, -sym.imp.sprintf(gp)
move a0, s1
jalr t9
move a1, s4
lw gp, 0x18(sp)
lb a1, 0x20(sp)
lw t9, -sym.sobj_add_char(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
lb a1, 0x21(sp)
lw t9, -sym.sobj_add_char(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
nop
lw t9, -sym.sobj_get_char(gp)
move a1, s0
jalr t9
--
addiu s0, zero, -1
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
beqz s4, 0x418a38
nop
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s4
lw gp, 0x18(sp)
lw ra, 0x54(sp)
move v0, s0
lw s7, 0x50(sp)
lw s6, 0x4c(sp)
lw s5, 0x48(sp)
lw s4, 0x44(sp)
lw s3, 0x40(sp)
lw s2, 0x3c(sp)
lw s1, 0x38(sp)
lw s0, 0x34(sp)
jr ra
addiu sp, sp, 0x58
lw t9, -sym.imp.sprintf(gp)
addiu s0, sp, 0x20
lui a1, 0x42
move a0, s0
addiu a1, a1, 0x2da0
jalr t9
move a2, s1
lw gp, 0x18(sp)
move a1, s0
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a0, s7
lw gp, 0x18(sp)
b 0x418a08
addiu s0, zero, 3
lui gp, 0x44
addiu sp, sp, -0x48
addiu gp, gp, -0x4690
sw ra, 0x44(sp)
sw fp, 0x40(sp)
--
lw gp, 0x18(sp)
b 0x4194bc
nop
lw t9, -sym.expand_operand_list(gp)
sw s0, 0x10(sp)
move a0, s2
move a1, s3
move a2, s4
jalr t9
move a3, v0
lw gp, 0x18(sp)
bltz v0, 0x4194e4
addiu s0, zero, -1
lw t9, -sym.sobj_free(gp)
nop
jalr t9
move a0, s5
lw gp, 0x18(sp)
move a0, s1
lw t9, -sym.sobj_get_length(gp)
nop
jalr t9
addiu s0, sp, 0x20
lw gp, 0x18(sp)
lui a1, 0x42
lw t9, -sym.imp.sprintf(gp)
move a0, s0
addiu a1, a1, 0x2da0
jalr t9
move a2, v0
lw gp, 0x18(sp)
move a1, s0
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a0, s5
lw gp, 0x18(sp)
b 0x4194e4
addiu s0, zero, 3
lw ra, 0x4c(sp)
move v0, s0
lw s5, 0x48(sp)
lw s4, 0x44(sp)
lw s3, 0x40(sp)
lw s2, 0x3c(sp)
lw s1, 0x38(sp)
--
addiu s0, zero, 3
lw t9, -sym.sobj_get_string(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
move a0, s4
lw t9, -sym.sobj_get_string(gp)
nop
jalr t9
move s0, v0
lw gp, 0x18(sp)
nop
lw t9, -sym.imp.atoi(gp)
nop
jalr t9
move a0, v0
lw gp, 0x18(sp)
move a0, s0
lw t9, -sym.imp.strtoul(gp)
move a2, v0
jalr t9
move a1, zero
lw gp, 0x18(sp)
addiu s0, sp, 0x20
lw t9, -sym.imp.sprintf(gp)
lui a1, 0x42
move a0, s0
addiu a1, a1, 0x3028
jalr t9
move a2, v0
lw gp, 0x18(sp)
move a1, s0
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a0, s7
lw gp, 0x18(sp)
addiu s0, zero, 3
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
beqz s4, 0x419e64
nop
--
jalr t9
move a0, s3
lw gp, 0x18(sp)
bnez v0, 0x41a1b4
addiu s1, zero, -1
lw t9, -sym.sobj_empty(gp)
nop
jalr t9
move a0, s4
lw gp, 0x18(sp)
bnez v0, 0x41a1b0
nop
lw t9, -sym.sobj_get_string(gp)
nop
jalr t9
move a0, s4
lw gp, 0x18(sp)
move a1, v0
lw t9, -sym.sobj_strstr(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
b 0x41a1b4
move s1, v0
lw t9, -sym.imp.sprintf(gp)
addiu s0, sp, 0x20
addiu a1, a1, 0x2da0
move a2, s1
jalr t9
move a0, s0
lw gp, 0x18(sp)
move a0, s7
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a1, s0
lw gp, 0x18(sp)
b 0x41a150
addiu s0, zero, 3
addiu s0, zero, -1
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s3
lw gp, 0x18(sp)
--
addiu s1, zero, -1
jalr t9
nop
lw gp, 0x18(sp)
move a1, v0
lw t9, -sym.sobj_strchr(gp)
nop
jalr t9
move a0, s4
lw gp, 0x18(sp)
move s1, v0
lw t9, -sym.sobj_get_char(gp)
move a1, s0
jalr t9
move a0, s2
lw gp, 0x18(sp)
move a1, s0
lw t9, -sym.sobj_get_char(gp)
move a0, s2
beqz v0, 0x41a524
addiu s0, s0, 1
bltz s1, 0x41a420
nop
b 0x41a524
nop
lw t9, -sym.imp.sprintf(gp)
addiu s0, sp, 0x20
addiu a1, a1, 0x2da0
move a2, s1
jalr t9
move a0, s0
lw gp, 0x18(sp)
move a0, s7
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a1, s0
lw gp, 0x18(sp)
b 0x41a4c0
addiu s0, zero, 3
addiu s0, zero, -1
lw t9, -sym.sobj_del(gp)
nop
jalr t9
move a0, s4
lw gp, 0x18(sp)
--
nop
jalr t9
move a0, s4
lw gp, 0x18(sp)
lw ra, 0x54(sp)
move v0, s0
lw s7, 0x50(sp)
lw s6, 0x4c(sp)
lw s5, 0x48(sp)
lw s4, 0x44(sp)
lw s3, 0x40(sp)
lw s2, 0x3c(sp)
lw s1, 0x38(sp)
lw s0, 0x34(sp)
jr ra
addiu sp, sp, 0x58
b 0x41a8f0
addiu s0, s0, 1
move s1, zero
lw t9, -sym.sobj_free(gp)
nop
jalr t9
move a0, s7
lw gp, 0x18(sp)
addiu s0, sp, 0x20
lw t9, -sym.imp.sprintf(gp)
lui a1, 0x42
move a0, s0
addiu a1, a1, 0x2da0
jalr t9
move a2, s1
lw gp, 0x18(sp)
move a1, s0
lw t9, -sym.sobj_add_string(gp)
nop
jalr t9
move a0, s7
lw gp, 0x18(sp)
b 0x41a90c
addiu s0, zero, 3
lui gp, 0x44
addiu sp, sp, -0x48
addiu gp, gp, -0x4690
sw ra, 0x44(sp)
sw fp, 0x40(sp)
sw s7, 0x3c(sp)
[*] Function sprintf used 23 times xmldb
