[*] Binary protection state of tc
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH Symbols
[*] Function sprintf tear down of tc
sb v0, 3(s2)
lw ra, 0x4c(sp)
move v0, v1
lw s6, 0x48(sp)
lw s5, 0x44(sp)
lw s4, 0x40(sp)
lw s3, 0x3c(sp)
lw s2, 0x38(sp)
lw s1, 0x34(sp)
lw s0, 0x30(sp)
jr ra
addiu sp, sp, 0x50
b 0x42c440
move v1, zero
lui gp, 0x46
addiu sp, sp, -0x28
addiu gp, gp, -0x6f60
sw ra, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x18(sp)
lbu v1, 3(a0)
lbu v0, 2(a0)
lbu a2, (a0)
lbu a3, 1(a0)
lui s0, 0x45
lw t9, -sym.imp.sprintf(gp)
lui a1, 0x44
sw v0, 0x10(sp)
sw v1, 0x14(sp)
addiu a0, s0, 0x16b8
jalr t9
addiu a1, a1, -0x29c8
lw ra, 0x24(sp)
addiu v0, s0, 0x16b8
lw gp, 0x18(sp)
lw s0, 0x20(sp)
jr ra
addiu sp, sp, 0x28
lui gp, 0x46
addiu sp, sp, -0x30
addiu gp, gp, -0x6f60
sw ra, 0x2c(sp)
sw s2, 0x28(sp)
sw s1, 0x24(sp)
sw s0, 0x20(sp)
sw gp, 0x10(sp)
--
sw s4, 0x28(sp)
sw s3, 0x24(sp)
sw s2, 0x20(sp)
sw s1, 0x1c(sp)
sw s0, 0x18(sp)
sw gp, 0x10(sp)
move s4, a1
move s7, a0
sw a2, 0x48(sp)
blez a1, 0x42f0a0
move s0, a3
slti v0, a3, 3
bnez v0, 0x42f0a0
addiu s3, a1, -1
lw v0, -0x7fe4(gp)
nop
addiu s5, v0, 0x7484
move s2, a2
move s1, zero
addiu s6, zero, 1
b 0x42f054
addiu fp, zero, 0x3a
bnez v1, 0x42f0a0
nop
addu v0, s7, s1
lw t9, -sym.imp.sprintf(gp)
lbu a2, (v0)
move a0, s2
jalr t9
move a1, s5
lw gp, 0x10(sp)
addiu s0, s0, -2
beq s3, s1, 0x42f090
addiu s2, s2, 2
beq s0, s6, 0x42f090
nop
sb fp, (s2)
addiu s0, s0, -1
addiu s2, s2, 1
addiu s1, s1, 1
slt v0, s1, s4
bnez v0, 0x42f04c
slti v1, s0, 3
lw ra, 0x3c(sp)
lw v0, 0x48(sp)
lw fp, 0x38(sp)
[*] Function sprintf used 2 times tc