[*] Binary protection state of actionengined
Full RELRO Canary found NX disabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of actionengined
sw a3, 0x48c(sp)
sw v1, 0x3c(sp)
sw v0, 0x454(sp)
sw zero, 0x44(sp)
jalr t9
nop
beqz v0, 0xdba4
lw gp, 0x20(sp)
move s4, v0
lw v0, -0x7fd8(gp)
lw s5, -0x7fd8(gp)
sw v0, 0x2c(sp)
lw v0, -0x7fd8(gp)
lw s1, -0x7fd0(gp)
addiu v0, v0, 0x6558
lw s6, -0x7fd8(gp)
addiu s5, s5, 0x64d0
addiu s1, s1, -0x6560
sw v0, 0x30(sp)
lw t9, -sym.imp.g_dir_read_name(gp)
jalr t9
move a0, s4
move s2, v0
beqz v0, 0xdad8
lw gp, 0x20(sp)
lw t9, -sym.imp.g_sprintf(gp)
addiu s3, sp, 0x54
move a3, s2
move a2, s0
move a1, s5
jalr t9
move a0, s3
lw gp, 0x20(sp)
move a1, s1
lw t9, -sym.imp.g_str_has_suffix(gp)
jalr t9
move a0, s2
beqz v0, 0xdb30
lw gp, 0x20(sp)
lw t9, -sym.imp.g_file_test(gp)
addiu a1, zero, 1
jalr t9
move a0, s3
beqz v0, 0xdb30
lw gp, 0x20(sp)
lw t9, -sym.imp.strlen(gp)
--
sw gp, 0x10(sp)
sw s7, 0x43c(sp)
sw s4, 0x430(sp)
sw ra, 0x444(sp)
sw fp, 0x440(sp)
sw s5, 0x434(sp)
sw s1, 0x424(sp)
sw s0, 0x420(sp)
move s4, a0
move s7, a2
move a1, zero
move a2, s3
move a0, s2
sw v0, 0x41c(sp)
sw zero, 0x18(sp)
jalr t9
nop
beqz v0, 0xfe1c
lw gp, 0x10(sp)
lw s1, -0x7fd8(gp)
move s0, v0
addiu fp, sp, 0x1c
addiu s1, s1, 0x64d0
b 0xfd98
lw s5, -sym.recipient_template_load_file(gp)
lw t9, -sym.imp.g_sprintf(gp)
move a3, v0
move a2, s2
move a1, s1
jalr t9
move a0, fp
move a2, s3
move a1, fp
move t9, s5
bal sym.recipient_template_load_file
move a0, s4
beqz v0, 0xfe00
lw gp, 0x10(sp)
lw t9, -sym.imp.g_dir_read_name(gp)
jalr t9
move a0, s0
bnez v0, 0xfd64
lw gp, 0x10(sp)
addiu s1, zero, 1
lw t9, -sym.imp.g_dir_close(gp)
jalr t9
--
lw a2, -0x7864(gp)
lw a1, -0x7cc4(gp)
lw a0, -0x78cc(gp)
jalr t9
move s3, v0
lw gp, 0x18(sp)
sw v0, (s7)
move s6, zero
lw v0, -0x7fd8(gp)
lw s5, -0x7fd8(gp)
sw v0, 0x3c(sp)
lw v0, -0x7fd0(gp)
lw s4, -0x7fd8(gp)
addiu v0, v0, -0x60b0
sw v0, 0x34(sp)
lw v0, -0x7fd8(gp)
addiu s5, s5, 0x64d0
addiu s4, s4, 0x6ec4
sw v0, 0x38(sp)
lw t9, -sym.imp.g_dir_read_name(gp)
jalr t9
move a0, s3
move s0, v0
beqz v0, 0x11700
lw gp, 0x18(sp)
lw t9, -sym.imp.g_sprintf(gp)
addiu s1, sp, 0x44
move a3, s0
move a2, s2
move a1, s5
jalr t9
move a0, s1
lw gp, 0x18(sp)
move a1, s4
lw t9, -sym.imp.g_str_has_suffix(gp)
jalr t9
move a0, s0
beqz v0, 0x11760
lw gp, 0x18(sp)
lw t9, -sym.imp.g_file_test(gp)
addiu a1, zero, 1
jalr t9
move a0, s1
beqz v0, 0x11760
lw gp, 0x18(sp)
lw t9, -sym.action_configuration_deserialize(gp)
--
lw a2, -0x7864(gp)
lw a1, -0x7cc4(gp)
lw a0, -0x78cc(gp)
sw zero, 0x2c(sp)
jalr t9
move s7, v0
lw gp, 0x18(sp)
lw v1, 0x30(sp)
lw fp, -0x7fd8(gp)
sw v0, (v1)
lw v0, -0x7eb0(gp)
addiu v0, v0, 0x5b38
sw v0, 0x48(sp)
lw v0, -0x7fd0(gp)
addiu v0, v0, -0x61d0
sw v0, 0x4c(sp)
lw v0, -0x7eb0(gp)
addiu v0, v0, 0x5eec
sw v0, 0x40(sp)
lw t9, -sym.imp.g_dir_read_name(gp)
jalr t9
move a0, s7
move s0, v0
beqz v0, 0x19ca0
lw gp, 0x18(sp)
lw t9, -sym.imp.g_sprintf(gp)
addiu s4, sp, 0x8c
move a3, s0
move a2, s5
addiu a1, fp, 0x64d0
jalr t9
move a0, s4
lw gp, 0x18(sp)
move a0, s0
lw a1, -0x7fd8(gp)
lw t9, -sym.imp.g_str_has_suffix(gp)
jalr t9
addiu a1, a1, 0x6ec4
beqz v0, 0x19acc
lw gp, 0x18(sp)
lw t9, -sym.imp.g_file_test(gp)
addiu a1, zero, 1
jalr t9
move a0, s4
beqz v0, 0x19acc
lw gp, 0x18(sp)
--
lw a0, -0x7bdc(gp)
move a2, zero
jalr t9
move s4, v0
lw gp, 0x18(sp)
lw v1, 0x28(sp)
move s7, zero
lw s3, -0x7fd8(gp)
sw v0, (v1)
lw v0, -0x7fd0(gp)
lw s6, -0x7fd8(gp)
sw v0, 0x20(sp)
lw v0, -0x7fd0(gp)
addiu s3, s3, 0x64d0
addiu v0, v0, -0x5ca4
sw v0, 0x2c(sp)
lw v0, -0x7fd0(gp)
addiu s6, s6, 0x6ec4
sw v0, 0x30(sp)
lw t9, -sym.imp.g_dir_read_name(gp)
jalr t9
move a0, s4
move s0, v0
beqz v0, 0x1bba8
lw gp, 0x18(sp)
lw t9, -sym.imp.g_sprintf(gp)
addiu s1, sp, 0x4c
move a3, s0
move a2, s2
move a1, s3
jalr t9
move a0, s1
lw gp, 0x18(sp)
move a1, s6
lw t9, -sym.imp.g_str_has_suffix(gp)
jalr t9
move a0, s0
beqz v0, 0x1bc0c
lw gp, 0x18(sp)
lw t9, -sym.imp.g_file_test(gp)
addiu a1, zero, 1
jalr t9
move a0, s1
beqz v0, 0x1bc0c
lw gp, 0x18(sp)
lw t9, -sym.recipient_get_type(gp)
[*] Function sprintf used 5 times actionengined
