[*] Binary protection state of mount.util-linux

  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols

[*] Function sprintf tear down of mount.util-linux

    ; assembly                           | /* r2dec pseudo code output */

                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/bin/mount.util-linux @ 0x4250 */

                                         | #include <stdint.h>

                                         |  

    ; (fcn) fcn.00004250 ()              | void fcn_00004250 () {

    0x00004250 lui gp, 2                 |     

    0x00004254 addiu gp, gp, 0xdd0       |     

    0x00004258 addu gp, gp, t9           |     gp += t9;

    0x0000425c addiu sp, sp, -0x28       |     

    0x00004260 addiu v0, sp, 0x30        |     v0 = sp + 0x30;

    0x00004264 sw s0, 0x20(sp)           |     *(var_20h) = s0;

    0x00004268 lw s0, -0x7d90(gp)        |     s0 = *((gp - 8036));

    0x0000426c lw t9, -0x7e64(gp)        |     t9 = sym.imp.__vasprintf_chk

    0x00004270 sw gp, 0x10(sp)           |     *(var_10h) = gp;

    0x00004274 lw v1, (s0)               |     v1 = *(s0);

    0x00004278 sw ra, 0x24(sp)           |     *(var_24h) = ra;

    0x0000427c sw a2, 0x30(sp)           |     *(arg_30h) = a2;

    0x00004280 sw a3, 0x34(sp)           |     *(arg_34h) = a3;

    0x00004284 move a2, a1               |     a2 = a1;

    0x00004288 sw v0, 0x18(sp)           |     *(var_18h) = v0;

    0x0000428c move a3, v0               |     a3 = v0;

    0x00004290 addiu a1, zero, 1         |     a1 = 1;

    0x00004294 sw v1, 0x1c(sp)           |     *(var_1ch) = v1;

    0x00004298 jalr t9                   |     t9 ();

    0x0000429c nop                       |     

    0x000042a0 lw gp, 0x10(sp)           |     gp = *(var_10h);

                                         |     if (v0 >= 0) {

    0x000042a4 bltz v0, 0x42c4           |         

    0x000042a8 lw a0, 0x1c(sp)           |         a0 = *(var_1ch);

    0x000042ac lw v1, (s0)               |         v1 = *(s0);

    0x000042b0 lw ra, 0x24(sp)           |         ra = *(var_24h);

                                         |         if (a0 != v1) {

    0x000042b4 bne a0, v1, 0x42d8        |             goto label_0;

                                         |         }

    0x000042b8 lw s0, 0x20(sp)           |         s0 = *(var_20h);

    0x000042bc addiu sp, sp, 0x28        |         

    0x000042c0 jr ra                     |         return v1;

                                         |     }

    0x000042c4 lw a1, -0x7fdc(gp)        |     a1 = *((gp - 8183));

    0x000042c8 lw t9, -0x7dd0(gp)        |     t9 = sym.imp.err;

    0x000042cc addiu a1, a1, -0x54ec     |     a1 += -0x54ec;

    0x000042d0 addiu a0, zero, 2         |     a0 = 2;

    0x000042d4 jalr t9                   |     t9 ();

                                         | label_0:

    0x000042d8 lw t9, -0x7db4(gp)        |     t9 = sym.imp.__stack_chk_fail;

    0x000042dc jalr t9                   |     t9 ();

    0x000042e0 nop                       |     

                                         | }

[*] Function sprintf used 2 times mount.util-linux