[*] Binary protection state of libuClibc-0.9.30.1.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
Full RELRO No Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of libuClibc-0.9.30.1.so
lw t9, -sym.strlen(gp)
jalr t9
move a0, s0
lw gp, 0x18(sp)
move a2, v0
addiu a0, zero, 0x2f
sltiu v0, a2, 2
bnez v0, 0x17eac
addu v1, s0, a2
lb v0, -1(v1)
beql v0, a0, 0x17e94
addiu a2, a2, -1
addiu v0, s1, 8
addu v0, v0, a2
sltu v0, s3, v0
beqz v0, 0x17ee0
lw a1, -0x7fac(gp)
lw t9, -sym.__errno_location(gp)
jalr t9
nop
lw gp, 0x18(sp)
addiu v1, zero, 0x16
sw v1, (v0)
b 0x17f04
addiu v0, zero, -1
lw t9, -sym.sprintf(gp)
move a0, s4
addiu a1, a1, -0x6514
move a3, s0
sw s1, 0x10(sp)
jalr t9
sw s2, 0x14(sp)
lw gp, 0x18(sp)
move v0, zero
lw ra, 0xcc(sp)
lw s4, 0xc8(sp)
lw s3, 0xc4(sp)
lw s2, 0xc0(sp)
lw s1, 0xbc(sp)
lw s0, 0xb8(sp)
jr ra
addiu sp, sp, 0xd0
lw s0, -0x7fac(gp)
lw t9, -sym.strcoll(gp)
addiu a0, s0, -0x651c
jalr t9
--
lw v0, -0x7f68(gp)
lw t9, -sym.openlog(gp)
lw a1, -0x1060(v0)
lw v0, -0x7f68(gp)
ori a1, a1, 8
lw a0, -0x1fa0(v0)
jalr t9
move a2, zero
lw gp, 0x10(sp)
andi v0, s1, 0x3f8
bnez v0, 0x26838
addiu s0, sp, 0x18
lw v0, -0x7f68(gp)
lw v0, -0x1fb0(v0)
or s1, s1, v0
lw t9, -sym.time(gp)
jalr t9
move a0, s0
lw gp, 0x10(sp)
move a0, s0
lw t9, -sym.ctime(gp)
jalr t9
addiu s0, sp, 0x14c
lw gp, 0x10(sp)
move a2, s1
lw s2, -sym.sprintf(gp)
lw a1, -0x7fac(gp)
move a0, s0
addiu a1, a1, -0x5f74
move t9, s2
jalr t9
addiu a3, v0, 4
lw gp, 0x10(sp)
addu s3, s0, v0
lw v0, -0x7f68(gp)
lw s0, -0x1fa0(v0)
beqz s0, 0x268e8
move s1, s3
lw t9, -sym.strlen(gp)
jalr t9
move a0, s0
sltiu v0, v0, 0x3c0
beqz v0, 0x268cc
lw gp, 0x10(sp)
lw a1, -0x7fac(gp)
move a2, s0
addiu a1, a1, -0x5f68
move t9, s2
jalr t9
move a0, s3
b 0x268e4
lw gp, 0x10(sp)
lw a1, -0x7fac(gp)
move a0, s3
move t9, s2
jalr t9
addiu a1, a1, -0x5f64
lw gp, 0x10(sp)
addu s1, s3, v0
lw v0, -0x7f68(gp)
lw v0, -0x1060(v0)
andi v0, v0, 1
beqz v0, 0x26930
lw v0, -0x7f68(gp)
lw t9, -sym.getpid(gp)
jalr t9
nop
lw gp, 0x10(sp)
move a0, s1
lw a1, -0x7fac(gp)
lw t9, -sym.sprintf(gp)
addiu a1, a1, -0x5f48
jalr t9
move a2, v0
lw gp, 0x10(sp)
addu s1, s1, v0
lw v0, -0x7f68(gp)
lw v0, -0x1fa0(v0)
beqz v0, 0x2694c
addiu v0, zero, 0x3a
sb v0, (s1)
addiu v0, zero, 0x20
sb v0, 1(s1)
addiu s1, s1, 2
addiu s0, sp, 0x54b
subu s4, s0, s1
lw t9, -sym.vsnprintf(gp)
sw s5, (s6)
move a2, s7
move a3, fp
move a0, s1
--
sw ra, 0x154(sp)
sw s0, 0x150(sp)
sw gp, 0x28(sp)
bnez a1, 0x2aed0
move s0, a1
lw t9, -sym.__errno_location(gp)
jalr t9
nop
addiu v1, zero, 0x16
lw gp, 0x28(sp)
b 0x2af44
sw v1, (v0)
addiu v0, sp, 0x30
lw t9, -sym.getpwuid_r(gp)
addiu a1, sp, 0x34
addiu a2, sp, 0x50
addiu a3, zero, 0x100
jalr t9
sw v0, 0x10(sp)
bnez v0, 0x2af44
lw gp, 0x28(sp)
lw v0, 0x3c(sp)
lw a1, -0x7fac(gp)
sw v0, 0x10(sp)
lw v0, 0x40(sp)
lw t9, -sym.sprintf(gp)
sw v0, 0x14(sp)
lw v0, 0x44(sp)
lw a2, 0x34(sp)
sw v0, 0x18(sp)
lw v0, 0x48(sp)
lw a3, 0x38(sp)
sw v0, 0x1c(sp)
lw v0, 0x4c(sp)
move a0, s0
addiu a1, a1, -0x5c74
jalr t9
sw v0, 0x20(sp)
lw gp, 0x28(sp)
bgez v0, 0x2af48
move v1, zero
addiu v1, zero, -1
lw ra, 0x154(sp)
move v0, v1
lw s0, 0x150(sp)
jr ra
--
addu gp, gp, t9
addiu sp, sp, -0x28
sw ra, 0x24(sp)
sw gp, 0x10(sp)
addiu v0, sp, 0x30
lw t9, -sym.vdprintf(gp)
sw a2, 0x30(sp)
sw a3, 0x34(sp)
sw v0, 0x18(sp)
jalr t9
move a2, v0
lw ra, 0x24(sp)
lw gp, 0x10(sp)
jr ra
addiu sp, sp, 0x28
nop
nop
nop
lui gp, 5
addiu gp, gp, -0x7540
addu gp, gp, t9
addiu sp, sp, -0x28
sw ra, 0x24(sp)
sw gp, 0x10(sp)
addiu v0, sp, 0x30
lw t9, -sym.vasprintf(gp)
sw a2, 0x30(sp)
sw a3, 0x34(sp)
sw v0, 0x18(sp)
jalr t9
move a2, v0
lw ra, 0x24(sp)
lw gp, 0x10(sp)
jr ra
addiu sp, sp, 0x28
nop
nop
nop
lui gp, 5
addiu gp, gp, -0x7590
addu gp, gp, t9
addiu sp, sp, -0x28
sw ra, 0x24(sp)
sw gp, 0x10(sp)
addiu v0, sp, 0x30
lw t9, -sym.vsnprintf(gp)
--
addiu sp, sp, 0x20
lui gp, 4
addiu gp, gp, -0xbd8
addu gp, gp, t9
addiu sp, sp, -0x430
sw ra, 0x42c(sp)
sw s4, 0x428(sp)
sw s3, 0x424(sp)
sw s2, 0x420(sp)
sw s1, 0x41c(sp)
sw s0, 0x418(sp)
sw gp, 0x10(sp)
lw t9, -sym.__fbufsize(gp)
addiu t9, t9, 0x7058
jalr t9
move s0, a0
lw gp, 0x10(sp)
beqz v0, 0x372c8
move s4, v0
lw t9, -sym.__rpc_thread_createerr(gp)
jalr t9
nop
lw gp, 0x10(sp)
move a2, s0
lw a1, -0x7fac(gp)
lw t9, -sym.sprintf(gp)
addiu a1, a1, -0x667c
move a0, s4
jalr t9
move s1, v0
lw gp, 0x10(sp)
addu s0, s4, v0
lw v0, -0x7fac(gp)
lw a2, (s1)
addiu a3, v0, -0x4740
move v1, zero
sll v0, v1, 3
addu a1, v0, a3
lw v0, (a1)
addiu v1, v1, 1
bne v0, a2, 0x37170
sltiu a0, v1, 0x12
lw v0, -0x7fac(gp)
lw v1, 4(a1)
addiu v0, v0, -0x46b0
b 0x37180
--
sw ra, 0x444(sp)
sw s5, 0x440(sp)
sw s4, 0x43c(sp)
sw s3, 0x438(sp)
sw s2, 0x434(sp)
sw s1, 0x430(sp)
sw s0, 0x42c(sp)
sw gp, 0x10(sp)
lw t9, -sym.__fbufsize(gp)
move s0, a0
addiu t9, t9, 0x7058
jalr t9
move s1, a1
move s5, v0
lw gp, 0x10(sp)
beqz s5, 0x375a0
move v0, zero
lw v0, 4(s0)
move a0, s0
lw t9, 8(v0)
jalr t9
addiu a1, sp, 0x18
lw gp, 0x10(sp)
move a2, s1
lw a1, -0x7fac(gp)
lw t9, -sym.sprintf(gp)
addiu a1, a1, -0x667c
jalr t9
move a0, s5
lw gp, 0x10(sp)
addu s0, s5, v0
lw v0, -0x7fac(gp)
lw a1, 0x18(sp)
addiu a2, v0, -0x4740
move v1, zero
sll v0, v1, 3
addu a0, v0, a2
lw v0, (a0)
bne v0, a1, 0x373f4
addiu v1, v1, 1
lw v0, -0x7fac(gp)
lw v1, 4(a0)
addiu v0, v0, -0x46b0
b 0x37408
addu a1, v0, v1
sltiu v0, v1, 0x12
--
lw t9, -sym.strlen(gp)
jalr t9
move a0, s0
lw v1, 0x18(sp)
addu s1, s0, v0
sltiu v0, v1, 0x12
beqz v0, 0x3756c
lw gp, 0x10(sp)
sll v0, v1, 2
lw v1, -0x7fac(gp)
addiu v1, v1, -0x4890
addu v1, v1, v0
lw v0, (v1)
addu v0, v0, gp
jr v0
nop
addiu s0, sp, 0x24
lw a0, 0x1c(sp)
lw t9, -sym.__glibc_strerror_r(gp)
move a1, s0
jalr t9
addiu a2, zero, 0x400
lw gp, 0x10(sp)
move a2, s0
lw a1, -0x7fac(gp)
lw t9, -sym.sprintf(gp)
addiu a1, a1, -0x4910
jalr t9
move a0, s1
b 0x3758c
lw gp, 0x10(sp)
lw v0, -0x7fac(gp)
lw a1, 0x1c(sp)
addiu a2, v0, -0x4848
move v1, zero
sll v0, v1, 3
addu a0, v0, a2
lw v0, (a0)
bne v0, a1, 0x374cc
addiu v1, v1, 1
lw v0, -0x7fac(gp)
lw v1, 4(a0)
addiu v0, v0, -0x4808
b 0x374dc
addu s2, v0, v1
sltiu v0, v1, 8
--
move s2, zero
lw s3, -sym.strcpy(gp)
lw a1, -0x7fac(gp)
lw s4, -sym.strlen(gp)
addiu a1, a1, -0x48d8
move t9, s3
jalr t9
move a0, s1
move t9, s4
jalr t9
move a0, s1
lw gp, 0x10(sp)
beqz s2, 0x37534
addu s0, s1, v0
move a0, s0
move t9, s3
jalr t9
move a1, s2
move t9, s4
jalr t9
move a0, s0
b 0x37550
lw gp, 0x10(sp)
lw a1, -0x7fac(gp)
lw a2, 0x1c(sp)
lw t9, -sym.sprintf(gp)
addiu a1, a1, -0x48cc
jalr t9
move a0, s0
lw gp, 0x10(sp)
b 0x37590
addu s1, s0, v0
lw a1, -0x7fac(gp)
lw a2, 0x1c(sp)
lw a3, 0x20(sp)
b 0x3757c
addiu a1, a1, -0x4900
lw a1, -0x7fac(gp)
lw a2, 0x1c(sp)
lw a3, 0x20(sp)
addiu a1, a1, -0x48a8
lw t9, -sym.sprintf(gp)
jalr t9
move a0, s1
lw gp, 0x10(sp)
addu s1, s1, v0
addiu v0, zero, 0xa
sb v0, (s1)
sb zero, 1(s1)
move v0, s5
lw ra, 0x444(sp)
lw s5, 0x440(sp)
lw s4, 0x43c(sp)
lw s3, 0x438(sp)
lw s2, 0x434(sp)
lw s1, 0x430(sp)
lw s0, 0x42c(sp)
jr ra
addiu sp, sp, 0x448
lui gp, 4
addiu gp, gp, -0x10e4
addu gp, gp, t9
--
sw v1, (v0)
b 0x3dd74
move a0, s1
addiu v0, zero, 0x20
sw v0, 0x14(sp)
lw t9, -sym.getnameinfo(gp)
addiu v0, zero, 2
lw a1, 0x30(sp)
addiu s0, sp, 0x58
move a0, s2
move a2, zero
move a3, zero
sw v0, 0x18(sp)
jalr t9
sw s0, 0x10(sp)
lw gp, 0x20(sp)
bnez v0, 0x3db30
move s4, zero
lw t9, -sym.atol(gp)
jalr t9
move a0, s0
lw gp, 0x20(sp)
andi s4, v0, 0xffff
lw a1, -0x7fac(gp)
addiu s0, sp, 0x78
lw t9, -sym.sprintf(gp)
addiu a1, a1, -0x3f48
move a2, s4
jalr t9
move a0, s0
lw gp, 0x20(sp)
move a0, s0
lw t9, -sym.strlen(gp)
jalr t9
addiu s7, sp, 0x118
lw gp, 0x20(sp)
move a1, s0
lw t9, -sym.write(gp)
addiu a2, v0, 1
jalr t9
move a0, s3
lw gp, 0x20(sp)
addiu v0, zero, 0x80
lw fp, -sym.__libc_accept(gp)
sw v0, 0x34(sp)
addiu s6, sp, 0x34
--
lw s3, 0x24(sp)
lw s2, 0x20(sp)
lw s1, 0x1c(sp)
lw s0, 0x18(sp)
jr ra
addiu sp, sp, 0x40
nop
nop
lui gp, 3
addiu gp, gp, 0x5a70
addu gp, gp, t9
addiu sp, sp, -0x40
sw ra, 0x3c(sp)
sw s4, 0x38(sp)
sw s3, 0x34(sp)
sw s2, 0x30(sp)
sw s1, 0x2c(sp)
sw s0, 0x28(sp)
sw gp, 0x18(sp)
move s3, a2
move s1, a0
move s2, a1
bnez a2, 0x40acc
move s4, a3
lw a1, -0x7fac(gp)
lw t9, -sym.asprintf(gp)
addiu a1, a1, -0x3db4
jalr t9
addiu a0, sp, 0x20
b 0x40b6c
lw gp, 0x18(sp)
lw t9, -0x7ba4(gp)
jalr t9
nop
move s0, v0
lw v0, 0xc4(v0)
bnez v0, 0x40b0c
lw gp, 0x18(sp)
lw t9, -sym.svcudp_create(gp)
jalr t9
addiu a0, zero, -1
lw gp, 0x18(sp)
bnez v0, 0x40b0c
sw v0, 0xc4(s0)
lw a0, -0x7fac(gp)
b 0x40b94
addiu a0, a0, -0x3d8c
lw t9, -sym.pmap_unset(gp)
move a0, s1
jalr t9
move a1, s2
lw gp, 0x18(sp)
lw a0, 0xc4(s0)
lw a3, -0x7b20(gp)
addiu v0, zero, 0x11
lw t9, -sym.svc_register(gp)
addiu a3, a3, 0xc2c
move a1, s1
move a2, s2
jalr t9
sw v0, 0x10(sp)
bnez v0, 0x40b74
lw gp, 0x18(sp)
lw a1, -0x7fac(gp)
lw t9, -sym.asprintf(gp)
addiu a1, a1, -0x3d6c
move a2, s1
move a3, s2
jalr t9
addiu a0, sp, 0x20
lw gp, 0x18(sp)
b 0x40be0
lw v0, -obj.stderr(gp)
lw t9, -sym.malloc(gp)
jalr t9
addiu a0, zero, 0x18
lw gp, 0x18(sp)
bnez v0, 0x40bac
move v1, v0
lw a0, -0x7fac(gp)
addiu a0, a0, -0x3d44
lw t9, -sym.strdup(gp)
jalr t9
nop
lw gp, 0x18(sp)
--
bnez v0, 0x40d10
lw gp, 0x10(sp)
lw t9, -sym.svcerr_decode(gp)
jalr t9
move a0, s2
b 0x40d98
lw gp, 0x10(sp)
lw t9, (s0)
jalr t9
move a0, s1
lw gp, 0x10(sp)
bnez v0, 0x40d38
move a2, v0
lw v1, 0x10(s0)
lw v0, -sym.xdr_void(gp)
bne v1, v0, 0x40df4
lw ra, 0x2294(sp)
lw t9, -sym.svc_sendreply(gp)
lw a1, 0x10(s0)
jalr t9
move a0, s2
bnez v0, 0x40d7c
lw gp, 0x10(sp)
lw a1, -0x7fac(gp)
lw a2, 4(s0)
lw t9, -sym.asprintf(gp)
addiu a1, a1, -0x3d20
addiu a0, sp, 0x18
jalr t9
nop
lw gp, 0x10(sp)
lw t9, -sym.exit(gp)
jalr t9
addiu a0, zero, 1
lw v0, 8(s2)
lw a1, 0xc(s0)
lw t9, 0x10(v0)
move a0, s2
jalr t9
addiu a2, sp, 0x1c
lw gp, 0x10(sp)
b 0x40df4
lw ra, 0x2294(sp)
bnel s0, zero, 0x40cb0
lw v0, 4(s0)
lw a1, -0x7fac(gp)
lw t9, -sym.asprintf(gp)
move a2, s1
addiu a0, sp, 0x18
jalr t9
addiu a1, a1, -0x3d00
lw gp, 0x10(sp)
lw a0, 0x18(sp)
lw v0, -obj.stderr(gp)
lw t9, -sym.fputs(gp)
jalr t9
lw a1, (v0)
lw gp, 0x10(sp)
lw t9, -sym.free(gp)
jalr t9
lw a0, 0x18(sp)
b 0x40d70
lw gp, 0x10(sp)
lw ra, 0x2294(sp)
lw s3, 0x2290(sp)
lw s2, 0x228c(sp)
lw s1, 0x2288(sp)
--
addiu a3, a3, 1
jr ra
move v0, a1
lui gp, 3
addiu gp, gp, -0x28a4
addu gp, gp, t9
lw a1, -0x7f68(gp)
lw t9, -sym.ether_aton_r(gp)
jr t9
addiu a1, a1, 0x2344
lui gp, 3
addiu gp, gp, -0x28c0
addu gp, gp, t9
addiu sp, sp, -0x30
sw ra, 0x2c(sp)
sw s0, 0x28(sp)
sw gp, 0x20(sp)
lbu t1, 5(a0)
lbu v0, 2(a0)
lbu v1, 3(a0)
lbu t0, 4(a0)
move s0, a1
lw a1, -0x7fac(gp)
lbu a2, (a0)
lbu a3, 1(a0)
lw t9, -sym.sprintf(gp)
move a0, s0
sw v0, 0x10(sp)
sw v1, 0x14(sp)
sw t0, 0x18(sp)
sw t1, 0x1c(sp)
jalr t9
addiu a1, a1, -0x3660
lw ra, 0x2c(sp)
move v0, s0
lw gp, 0x20(sp)
lw s0, 0x28(sp)
jr ra
addiu sp, sp, 0x30
lui gp, 3
addiu gp, gp, -0x2934
addu gp, gp, t9
addiu sp, sp, -0x30
sw ra, 0x2c(sp)
sw s0, 0x28(sp)
sw gp, 0x20(sp)
lbu t1, 5(a0)
lbu v0, 2(a0)
lbu v1, 3(a0)
lbu t0, 4(a0)
lw s0, -0x7f68(gp)
lw a1, -0x7fac(gp)
lbu a2, (a0)
lbu a3, 1(a0)
lw t9, -sym.sprintf(gp)
addiu a0, s0, 0x2330
sw v0, 0x10(sp)
sw v1, 0x14(sp)
sw t0, 0x18(sp)
sw t1, 0x1c(sp)
jalr t9
addiu a1, a1, -0x3660
lw ra, 0x2c(sp)
addiu v0, s0, 0x2330
lw gp, 0x20(sp)
lw s0, 0x28(sp)
jr ra
addiu sp, sp, 0x30
nop
nop
lui gp, 3
addiu gp, gp, -0x29b0
addu gp, gp, t9
lw t9, -sym.free(gp)
jr t9
--
sll v0, s1, 2
lw v0, 0x2c(sp)
bne v0, s6, 0x4a8f4
sll v0, s1, 2
lw t9, -0x794c(gp)
lw v0, 0x9c(sp)
subu a2, sp, s0
addiu a0, v0, 0xc
addiu a2, a2, 0x66
addiu t9, t9, -0x5b30
jalr t9
move a1, s0
lw gp, 0x10(sp)
beqz v0, 0x4a9b0
move v1, zero
lw t9, -sym.strlen(gp)
jalr t9
move a0, s0
lw gp, 0x10(sp)
b 0x4a928
addu s0, s0, v0
lw v1, 0x68(sp)
sll v0, s1, 2
lw a1, -0x7fac(gp)
addu v0, v1, v0
lw t9, -sym.sprintf(gp)
lw a2, (v0)
move a0, s0
jalr t9
addiu a1, a1, -0x35f0
lw gp, 0x10(sp)
addu s0, s0, v0
addiu s1, s1, 1
slti v0, s1, 8
bnez v0, 0x4a844
addiu t9, zero, -1
addiu v0, zero, -1
beq s2, v0, 0x4a94c
addu v1, s3, s2
addiu v0, zero, 8
bne v1, v0, 0x4a950
lw v1, 0xa4(sp)
addiu v0, zero, 0x3a
sb v0, (s0)
addiu s0, s0, 1
lw v1, 0xa4(sp)
--
addiu t9, s3, 0xc
sltu v0, v1, s4
sw a0, 0x6c(sp)
sw t9, 0x68(sp)
beqz v0, 0x4e4a0
addiu s2, s3, 0x2c
move s4, v1
addiu s2, s3, 0x18
sltiu v0, s4, 0x100
bnez v0, 0x4e744
lw v1, 0xa8(sp)
addiu v0, zero, 2
bne v1, v0, 0x4e504
lw t9, -sym.memcpy(gp)
move a2, s5
move a0, s3
jalr t9
move a1, s1
lw gp, 0x20(sp)
sw s3, 4(s3)
lbu v1, (s1)
lbu v0, 1(s1)
lw a1, -0x7fac(gp)
lbu a2, 3(s1)
lbu a3, 2(s1)
lw t9, -sym.sprintf(gp)
addiu a1, a1, -0x353c
move a0, s2
sw v0, 0x10(sp)
jalr t9
sw v1, 0x14(sp)
b 0x4e578
lw v0, 0x6c(sp)
move a1, s1
move a2, s5
jalr t9
move a0, s3
lw gp, 0x20(sp)
addiu s0, s5, -1
lw v0, -0x7fac(gp)
sw s3, 0x10(s3)
addiu s6, v0, -0x3520
move s1, s2
b 0x4e554
lw s5, -sym.sprintf(gp)
lbu a2, (v0)
move t9, s5
srl a3, a2, 4
jalr t9
andi a2, a2, 0xf
lw gp, 0x20(sp)
addiu s0, s0, -1
addu s1, s1, v0
addu v0, s3, s0
move a0, s1
bgez s0, 0x4e534
move a1, s6
lw a1, -0x7fac(gp)
lw t9, -sym.strcpy(gp)
jalr t9
addiu a1, a1, -0x3518
lw v0, 0x6c(sp)
lw gp, 0x20(sp)
sw zero, 4(v0)
sw s2, 0xc(s3)
--
lw a0, -0x7fac(gp)
mtc1 v0, f2
ldc1 f0, -0x5ac0(a0)
mtc1 v1, f3
move v1, zero
sub.d f0, f2, f0
sdc1 f0, (s1)
lw ra, 0x24(sp)
move v0, v1
lw s1, 0x20(sp)
lw s0, 0x1c(sp)
jr ra
addiu sp, sp, 0x28
nop
lui gp, 2
addiu gp, gp, 0x2580
addu gp, gp, t9
addiu sp, sp, -0x28
sw ra, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
lw a1, -0x7fac(gp)
sdc1 f12, 0x10(sp)
move v1, a2
slti v0, a2, 0x12
lw t9, -sym.sprintf(gp)
addiu a2, zero, 0x11
movn a2, v1, v0
addiu a1, a1, -0x3260
move a0, a3
jalr t9
move s0, a3
lw ra, 0x24(sp)
move v0, s0
lw gp, 0x18(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x28
sra v0, a0, 0x1f
xor a0, v0, a0
jr ra
subu v0, a0, v0
lui gp, 2
addiu gp, gp, 0x2510
addu gp, gp, t9
lw t9, -sym.strtol(gp)
[*] Function sprintf used 21 times libuClibc-0.9.30.1.so
