[*] Binary protection state of neaps
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of neaps
jalr t9
move a1, zero
lw a2, 0x458(sp)
lw gp, 0x28(sp)
slti v0, a2, 0x100
bnez v0, 0x4021b8
nop
addiu a2, zero, 0xff
lw t9, -sym.imp.memcpy(gp)
lw a1, 0x45c(sp)
jalr t9
move a0, s0
lui v0, 0x40
lw gp, 0x28(sp)
addiu a2, v0, 0x66f8
addiu v0, zero, 4
beq s3, v0, 0x402234
addiu v0, zero, 5
beq s3, v0, 0x40226c
addiu s0, zero, 3
bne s3, s0, 0x402350
lui a0, 0x40
lbu v0, 1(s1)
lbu v1, 2(s1)
lbu a3, (s1)
lw t9, -sym.imp.sprintf(gp)
sw v0, 0x10(sp)
sw a2, 0x18(sp)
addiu v0, sp, 0x130
lui a1, 0x40
lui a2, 0x40
sw v1, 0x14(sp)
sw v0, 0x1c(sp)
addiu a1, a1, 0x66fc
addiu a2, a2, 0x6728
jalr t9
addiu a0, sp, 0x230
b 0x4022b8
nop
lbu v0, 1(s1)
lbu v1, 2(s1)
lbu a0, 3(s1)
lbu a3, (s1)
lui a1, 0x40
sw v0, 0x10(sp)
addiu v0, sp, 0x130
lw t9, -sym.imp.sprintf(gp)
sw v1, 0x14(sp)
sw a0, 0x18(sp)
sw a2, 0x1c(sp)
sw v0, 0x20(sp)
b 0x4022a8
addiu a1, a1, 0x673c
lbu v0, 1(s1)
lbu a1, 4(s1)
lbu v1, 2(s1)
lbu a0, 3(s1)
lbu a3, (s1)
lw t9, -sym.imp.sprintf(gp)
sw v0, 0x10(sp)
sw a1, 0x1c(sp)
addiu v0, sp, 0x130
lui a1, 0x40
sw v1, 0x14(sp)
sw a0, 0x18(sp)
sw a2, 0x20(sp)
sw v0, 0x24(sp)
addiu a1, a1, 0x676c
lui a2, 0x40
addiu a2, a2, 0x6728
jalr t9
addiu a0, sp, 0x230
lw gp, 0x28(sp)
addiu v0, zero, 0x100
lw t9, -sym.xmldbc_ephp_wb(gp)
addiu s0, sp, 0x30
sw v0, 0x10(sp)
move a0, zero
move a1, zero
[*] Function sprintf used 3 times neaps