[*] Binary protection state of stclient

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function sprintf tear down of stclient

addiu a2, zero, 0x80
lw t9, -sym.imp.EVP_DigestUpdate(gp)
jalr t9
move a1, s3
lw gp, 0x20(sp)
addiu v0, sp, 0x40
addiu s7, sp, 0x6c
lw t9, -sym.imp.EVP_DigestFinal(gp)
move a0, s0
move a2, v0
move a1, s7
sw v0, 0x2c(sp)
lw s1, -0x7fbc(gp)
jalr t9
sw zero, 0x40(sp)
lw gp, 0x20(sp)
move a0, s0
addiu s6, sp, 0x80
lw t9, -sym.imp.EVP_MD_CTX_free(gp)
jalr t9
move fp, s7
lw gp, 0x20(sp)
move s4, s6
addiu s2, sp, 0xa8
addiu s0, s1, -0x5c0c
lw t9, -sym.imp.g_sprintf(gp)
lbu a2, (fp)
move a0, s4
move a1, s0
jalr t9
addiu s4, s4, 2
addiu fp, fp, 1
bne s2, s4, 0x13960
lw gp, 0x20(sp)
lw v0, -0x7fbc(gp)
lw t9, 0x28(sp)
sw zero, 0x3c(sp)
lw v0, -0x5bf0(v0)
lw s0, 0x34(sp)
jalr t9
sw v0, 0xac(sp)
lw gp, 0x20(sp)
addiu a2, zero, 4
move a1, s3
lw t9, -sym.imp.EVP_DigestUpdate(gp)
move a0, v0
--
jalr t9
sw zero, 0x40(sp)
lw gp, 0x20(sp)
move a0, s2
lw t9, -sym.imp.EVP_MD_CTX_free(gp)
jalr t9
move s2, s7
lw gp, 0x20(sp)
lw t9, -sym.imp.EVP_sha1(gp)
jalr t9
nop
lw gp, 0x20(sp)
addiu v1, zero, 0x14
move a3, s4
lw t9, -sym.imp.HMAC(gp)
move a1, s0
sw zero, 0x18(sp)
sw s7, 0x14(sp)
sw v1, 0x10(sp)
addiu a2, zero, 0x14
jalr t9
move a0, v0
lw gp, 0x20(sp)
move s0, s3
addiu s4, sp, 0xd4
lw t9, -sym.imp.g_sprintf(gp)
lbu a2, (s2)
move a0, s0
move a1, s1
jalr t9
addiu s0, s0, 2
addiu s2, s2, 1
bne s4, s0, 0x13b00
lw gp, 0x20(sp)
lw t9, -sym.imp.g_free(gp)
jalr t9
lw a0, 0x34(sp)
lw gp, 0x20(sp)
move a2, s3
move a1, s6
lw a0, -0x7fbc(gp)
lw t9, -sym.imp.g_strdup_printf(gp)
jalr t9
addiu a0, a0, -0x5c04
lw gp, 0x20(sp)
lw a0, 0x12c(sp)

[*] Function sprintf used 2 times stclient