[*] Binary protection state of ld-uClibc-0.9.33.so

  	Full RELRO     Canary found      NX disabled  DSO          No RPATH     No RUNPATH   No Symbols

[*] Function printf tear down of ld-uClibc-0.9.33.so

addiu sp, sp, 0x50

lui gp, 2

addiu gp, gp, -0x3264

addu gp, gp, t9

addiu sp, sp, -0x30

sw ra, 0x2c(sp)

sw fp, 0x28(sp)

sw s2, 0x24(sp)

sw s1, 0x20(sp)

sw s0, 0x1c(sp)

move fp, sp

sw gp, 0x10(sp)

move s0, a0

invalid

lw s1, 0x28(a0)

addiu s1, s1, -0x7000

addu s1, v1, s1

invalid

lw s2, -0x7008(v1)

lw v0, 0x2c(a0)

lw t8, -8(s2)

sltu t8, t8, v0

beqz t8, 0x22fc

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

lw t9, -sym._dl_dprintf(gp)

jalr t9

addiu a1, a1, str.map__l_tls_modid___dtv__1_.counter_FAILED__n

addiu a0, zero, 0x1e

lw gp, 0x10(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x22fc

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lw t8, 0x2c(s0)

sll t8, t8, 3

addu s2, s2, t8

addiu t8, zero, 1

sb t8, 4(s2)

move t8, zero

sw s1, (s2)

lw v1, 0x14(s0)

lw v0, 0x18(s0)

beq t8, v0, 0x233c

addu a0, v1, t8

--

lw t9, -sym._dl_find_hash(gp)

move fp, sp

lw t8, 0x80(a2)

move s2, a0

lw s3, 0x7c(a2)

addiu a3, zero, 1

addu t8, v0, t8

lw t8, (t8)

sw gp, 0x18(sp)

addu s3, s3, t8

lw t8, -obj._dl_loaded_modules(gp)

move a0, s3

lw s4, 0xf4(a2)

lw a1, (t8)

lw s5, 0xf8(a2)

addiu a1, a1, 0x3c

jalr t9

sw zero, 0x10(sp)

lw gp, 0x18(fp)

bnez v0, 0x2448

move s0, v0

lw t8, -obj._dl_progname(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

move a3, s3

lw t9, -sym._dl_dprintf(gp)

lw a2, (t8)

jalr t9

addiu a1, a1, str._s:_cant_resolve_symbol__s_n

addiu a0, zero, 1

lw gp, 0x18(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x2448

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

subu s4, s5, s4

move v0, s0

addu s2, s4, s2

sll s2, s2, 2

addu s1, s1, s2

sw s0, (s1)

move sp, fp

lw ra, 0x3c(sp)

lw fp, 0x38(sp)

lw s5, 0x34(sp)

--

lw s3, (a0)

sll t8, t8, 4

lw t9, -sym._dl_find_hash(gp)

addu t8, t8, v0

lw t8, (t8)

sw gp, 0x18(sp)

addu s2, s2, t8

lw t8, (a1)

move a0, s2

addu s3, s3, t8

lw t8, -obj._dl_loaded_modules(gp)

lw a1, (t8)

sw zero, 0x10(sp)

jalr t9

addiu a1, a1, 0x3c

lw gp, 0x18(fp)

bnez v0, 0x2568

move s1, v0

lw t8, -obj._dl_progname(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

move a3, s2

lw a2, (t8)

lw t8, 4(s0)

addiu a1, a1, str._s:_cant_resolve_symbol__s_in_lib__s._n

lw t9, -sym._dl_dprintf(gp)

jalr t9

sw t8, 0x10(sp)

addiu a0, zero, 1

lw gp, 0x18(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x2568

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

sw s1, (s3)

move sp, fp

move v0, s1

lw ra, 0x34(sp)

lw fp, 0x30(sp)

lw s3, 0x2c(sp)

lw s2, 0x28(sp)

lw s1, 0x24(sp)

lw s0, 0x20(sp)

jr ra

addiu sp, sp, 0x38

--

and a1, a1, t8

lui a3, 0x400

move a0, zero

addiu a2, zero, 3

addiu a3, a3, 0x802

move s2, zero

addiu v0, zero, -1

addiu sp, sp, -0x20

sw v0, 0x10(sp)

sw s2, 0x14(sp)

addiu v0, zero, 0xffa

syscall

addiu sp, sp, 0x20

beqz a3, 0x2684

addiu t8, zero, -1

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

addiu v0, zero, -1

addiu t8, zero, -1

sw v0, 0x71d0(s1)

bne v0, t8, 0x26c8

sw v0, 0x71cc(s3)

lw t8, -obj._dl_progname(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

lw t9, -sym._dl_dprintf(gp)

lw a2, (t8)

jalr t9

addiu a1, a1, str._s:_mmap_of_a_spare_page_failed__n

addiu a0, zero, 0x14

lw gp, 0x10(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x26c8

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lw v0, 0x71d0(s1)

addiu t8, zero, -4

move sp, fp

addu s0, v0, s0

addiu s0, s0, 3

and s0, s0, t8

lw ra, 0x2c(sp)

sw s0, 0x71d0(s1)

lw fp, 0x28(sp)

lw s3, 0x24(sp)

--

b 0x2f28

sb zero, -1(t8)

move sp, fp

lw ra, 0x24(sp)

lw fp, 0x20(sp)

lw s0, 0x1c(sp)

jr ra

addiu sp, sp, 0x28

lui gp, 2

addiu gp, gp, -0x3f40

addu gp, gp, t9

addiu sp, sp, -0x28

sw ra, 0x24(sp)

sw fp, 0x20(sp)

sw s0, 0x1c(sp)

move fp, sp

lw t8, -obj._dl_tls_static_align(gp)

move s0, a0

lw v0, 0x20(a0)

lw t8, (t8)

sltu t8, t8, v0

beqz t8, 0x2fc0

sw gp, 0x10(sp)

lw a1, -0x7fe4(gp)

addiu a0, zero, 2

lw t9, -sym._dl_dprintf(gp)

jalr t9

addiu a1, a1, str.cannot_allocate_memory_in_static_TLS_block

addiu a0, zero, 0x1e

lw gp, 0x10(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x2fc4

lw t8, -obj._dl_tls_static_used(gp)

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lw t8, -obj._dl_tls_static_used(gp)

lw v0, 0x20(s0)

lw v1, (t8)

lw a0, -obj._dl_tls_static_size(gp)

addu v1, v0, v1

negu v0, v0

addiu v1, v1, -1

and v1, v1, v0

lw v0, 0x1c(s0)

lw a0, (a0)

--

addu t1, v0, s6

lw v0, 0x34(fp)

sll t1, t1, 2

addu t1, v0, t1

b 0x3350

lw v0, (t1)

lw v0, (s0)

addu t8, t8, v0

b 0x3404

sw t8, (s7)

b 0x3404

sw v0, (s7)

beqz v0, 0x3404

move t8, zero

lw a0, 8(t0)

beq t8, a0, 0x3404

nop

addu a1, t8, v0

lbu a2, (a1)

addu a1, t8, s7

addiu t8, t8, 1

b 0x3370

sb a2, (a1)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

lw t9, -sym._dl_dprintf(gp)

lw a2, (v0)

jalr t9

addiu a1, a1, str._n_s:_

beqz s6, 0x33cc

lw gp, 0x18(fp)

lw t8, -0x7fe4(gp)

addiu a0, zero, 2

lw t9, -sym._dl_dprintf(gp)

move a2, s5

jalr t9

addiu a1, t8, str.symbol__s:_

lw gp, 0x18(fp)

lw a1, -0x7fe4(gp)

addiu a0, zero, 2

lw t9, -sym._dl_dprintf(gp)

move a2, s4

lw a3, 4(s0)

jalr t9

addiu a1, a1, str.cant_handle_reloc_type__x_in_lib__s_n

addiu a0, zero, 1

lw gp, 0x18(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x3404

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

addiu s2, s2, 1

b 0x30f0

addiu s1, s1, 8

move v0, zero

move sp, fp

lw ra, 0x64(sp)

lw fp, 0x60(sp)

lw s7, 0x5c(sp)

lw s6, 0x58(sp)

--

sw s2, 0x10(s0)

lw v0, (t8)

addiu v0, v0, 1

sw v0, 8(s0)

sw v0, (t8)

move sp, fp

lw ra, 0x2c(sp)

lw fp, 0x28(sp)

lw s3, 0x24(sp)

lw s2, 0x20(sp)

lw s1, 0x1c(sp)

lw s0, 0x18(sp)

jr ra

addiu sp, sp, 0x30

addiu a0, zero, 0x2f0

jalr t9

move s3, s0

lw gp, 0x10(fp)

move s0, v0

bnez v0, 0x36e8

sw v0, 4(s3)

lw t8, -obj._dl_tls_generation(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

lw v0, (t8)

lw t9, -sym._dl_dprintf(gp)

addiu a1, a1, str.cannot_create_TLS_data_structures:_ABORT_n

addiu v0, v0, 1

jalr t9

sw v0, (t8)

addiu a0, zero, 0x7f

lw gp, 0x10(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x36ec

addiu t8, zero, 0x3e

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

addiu t8, zero, 0x3e

addiu v0, s0, 0x2f0

sw t8, (s0)

addiu t8, s0, 8

sw zero, 4(s0)

beq t8, v0, 0x363c

addiu t8, t8, 1

b 0x36fc

--

lw t9, -sym._dl_memalign(gp)

lw v0, -obj._dl_tls_dtv_slotinfo_list(gp)

lw v0, (v0)

lw v1, (v0)

sltu a0, t8, v1

bnez a0, 0x37c4

lw t9, -sym._dl_memalign(gp)

subu t8, t8, v1

b 0x37a8

lw v0, 4(v0)

sll v1, t8, 2

sll t8, t8, 4

subu t8, t8, v1

addu v0, v0, t8

lw s0, 0x10(v0)

lw a0, 0x20(s0)

jalr t9

lw a1, 0x1c(s0)

lw gp, 0x10(fp)

bnez v0, 0x382c

move s1, v0

lw a1, -0x7fe4(gp)

addiu a0, zero, 2

lw a2, -0x7fe4(gp)

addiu a3, zero, 0x29a

lw t9, -sym._dl_dprintf(gp)

addiu a1, a1, str._s:_d:_Out_of_memory____n

jalr t9

addiu a2, a2, str.allocate_and_init

addiu a0, zero, 1

lw gp, 0x10(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x382c

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lw v1, 0x14(s0)

move t8, zero

lw v0, 0x18(s0)

beq t8, v0, 0x3854

addu a0, v1, t8

lbu a1, (a0)

addu a0, s1, t8

addiu t8, t8, 1

b 0x3838

sb a1, (a0)

--

lw t8, (a0)

move fp, sp

lw v0, 0x10c(a0)

lw a1, 0x110(s0)

addu v0, v0, t8

lw t8, -obj._dl_pagesize(gp)

addu a1, v0, a1

sw gp, 0x10(sp)

lw t8, (t8)

negu t8, t8

and a0, t8, v0

and a1, a1, t8

beq a0, a1, 0x3970

addiu a2, zero, 1

subu a1, a1, a0

addiu v0, zero, 0x101d

syscall

beqz a3, 0x3934

lw t8, -obj._dl_errno(gp)

b 0x393c

sw v0, (t8)

bgez v0, 0x3970

nop

lw a1, -0x7fe4(gp)

addiu a0, zero, 2

lw t9, -sym._dl_dprintf(gp)

lw a2, 4(s0)

jalr t9

addiu a1, a1, str._s:_cannot_apply_additional_memory_protection_after_relocation

move a0, zero

lw gp, 0x10(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x3970

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

move sp, fp

lw ra, 0x24(fp)

lw fp, 0x20(sp)

lw s0, 0x1c(sp)

jr ra

addiu sp, sp, 0x28

lui gp, 2

addiu gp, gp, -0x4978

addu gp, gp, t9

addiu sp, sp, -0x28

--

move a0, v0

addiu v0, zero, 1

b 0x3ff0

lw t8, -obj._dl_internal_error_number(gp)

addiu a1, fp, 0xbc

addiu v0, zero, 0x100c

syscall

beqz a3, 0x3f74

lw t8, -obj._dl_errno(gp)

b 0x3f7c

sw v0, (t8)

bgez v0, 0x3ffc

nop

b 0x4108

addiu v0, zero, 1

lhu v1, 0x10(s0)

addiu v0, zero, 3

beq v1, v0, 0x416c

addiu t8, zero, 5

lw v0, -obj._dl_internal_error_number(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

sw t8, (v0)

lw t8, -obj._dl_progname(gp)

addiu a1, a1, str._s:__s_is_not_an_ELF_executable_for_MIPS_n

lw t9, -sym._dl_dprintf(gp)

lw a2, (t8)

jalr t9

lw a3, 0x1b0(fp)

lw gp, 0x18(fp)

move a0, s1

addiu v0, zero, 0xfa6

syscall

beqz a3, 0x3fdc

move a0, s0

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lw a1, (s2)

addiu v0, zero, 0xffb

syscall

beqz a3, 0x3ff4

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

b 0x4968

move s1, zero

andi t8, s2, 1

--

lui a3, 0x400

move a0, zero

addiu a2, zero, 3

lw a1, (s2)

addiu a3, a3, 0x802

addiu v0, zero, -1

addiu sp, sp, -0x20

sw v0, 0x10(sp)

sw s0, 0x14(sp)

addiu v0, zero, 0xffa

syscall

addiu sp, sp, 0x20

beqz a3, 0x40cc

move s0, v0

lw t8, -obj._dl_errno(gp)

addiu s0, zero, -1

sw v0, (t8)

addiu t8, zero, -1

bne s0, t8, 0x4110

move a0, s1

lw t8, -obj._dl_progname(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

addiu a3, zero, 0x1fc

lw s5, 0x1b0(fp)

lw t9, -sym._dl_dprintf(gp)

addiu a1, a1, str._s:_i:_cant_map__s_n

lw a2, (t8)

jalr t9

sw s5, 0x10(sp)

addiu v0, zero, 6

lw gp, 0x18(fp)

b 0x4698

lw t8, -obj._dl_internal_error_number(gp)

lw a2, (s2)

move a1, s0

addiu v0, zero, 0xfa3

syscall

beqz a3, 0x4134

lui t8, 0x464c

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lui t8, 0x464c

lw v0, (s0)

addiu t8, t8, 0x457f

beq v0, t8, 0x3f84

addiu a0, zero, 2

lw t8, -obj._dl_progname(gp)

lw a1, -0x7fe4(gp)

lw t9, -sym._dl_dprintf(gp)

lw a2, (t8)

addiu a1, a1, str._s:__s_is_not_an_ELF_file_n

jalr t9

lw a3, 0x1b0(fp)

addiu v0, zero, 3

b 0x4330

lw gp, 0x18(fp)

lhu v0, 0x12(s0)

addiu t8, zero, 8

andi v0, v0, 0xfffd

bne v0, t8, 0x3f94

addiu t8, zero, 4

lw s4, 0x1c(s0)

addiu s6, zero, 1

lw v0, -0x7fe4(gp)

lui v1, 0x100

lw s7, -obj._dl_progname(gp)

addu s4, s0, s4

sw s6, 0x154(fp)

move s5, zero

move s6, zero

addiu s3, zero, -1

sw zero, 0x158(fp)

addiu v0, v0, str._s:__s_has_more_than_one_dynamic_section_n

sw zero, 0x150(fp)

addiu v1, v1, 1

lhu t8, 0x2c(s0)

slt t8, s6, t8

beqz t8, 0x4288

addiu t8, zero, 2

lw a0, (s4)

bne a0, t8, 0x420c

lw t8, 0x150(fp)

beqz t8, 0x4204

move a1, v0

lw a2, (s7)

lw t9, -sym._dl_dprintf(gp)

addiu a0, zero, 2

lw a3, 0x1b0(fp)

sw v0, 0x178(fp)

jalr t9

sw v1, 0x17c(fp)

lw gp, 0x18(fp)

lw v1, 0x17c(fp)

lw v0, 0x178(fp)

lw a0, 8(s4)

sw a0, 0x150(fp)

lw t8, (s4)

addiu a0, zero, 1

bne t8, a0, 0x4264

addiu a0, zero, 7

addiu a0, zero, -1

bne s3, a0, 0x4234

lw t8, 8(s4)

sltu a0, t8, v1

beqz a0, 0x4248

nop

--

subu t8, t8, s3

addiu a3, zero, 0x802

sw t8, 0x16c(fp)

move a1, t8

move ra, zero

addiu v0, zero, -1

addiu sp, sp, -0x20

sw v0, 0x10(sp)

sw ra, 0x14(sp)

addiu v0, zero, 0xffa

syscall

addiu sp, sp, 0x20

beqz a3, 0x42f4

move s7, v0

lw t8, -obj._dl_errno(gp)

addiu s7, zero, -1

sw v0, (t8)

addiu t8, zero, -1

bne s7, t8, 0x433c

lw s5, 0x154(fp)

lw t8, -obj._dl_progname(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

addiu a3, zero, 0x264

lw s5, 0x1b0(fp)

lw t9, -sym._dl_dprintf(gp)

addiu a1, a1, str._s:_i:_cant_map__s_n

lw a2, (t8)

jalr t9

sw s5, 0x10(sp)

addiu v0, zero, 6

lw gp, 0x18(fp)

lw t8, -obj._dl_internal_error_number(gp)

b 0x3fc0

sw v0, (t8)

move s6, zero

lw ra, 0x1c(s0)

subu s3, s7, s3

lw t8, -0x7fd8(gp)

movn s6, s7, s5

addu ra, s0, ra

sw s3, 0x15c(fp)

sw s3, 0x71b8(t8)

sw s6, 0x174(fp)

sw zero, 0x168(fp)

sw zero, 0x164(fp)

--

beq v0, t8, 0x4468

lw a0, 0x15c(fp)

beqz s3, 0x4620

lw s5, 0x160(fp)

bne s3, v0, 0x446c

lw a1, 0x16c(fp)

lw s5, 0x160(fp)

addiu ra, ra, 0x20

addiu s5, s5, 1

b 0x436c

sw s5, 0x160(fp)

lw s6, 0x150(fp)

lw s5, 0x15c(fp)

addu t8, s5, s6

lw s5, 0x154(fp)

movn s6, t8, s5

bnez s6, 0x46b0

sw s6, 0x150(fp)

lw t8, -obj._dl_internal_error_number(gp)

addiu v0, zero, 7

lw a1, -0x7fe4(gp)

addiu a0, zero, 2

sw v0, (t8)

lw t8, -obj._dl_progname(gp)

addiu a1, a1, str._s:__s_is_missing_a_dynamic_section_n

lw t9, -sym._dl_dprintf(gp)

lw a2, (t8)

jalr t9

lw a3, 0x1b0(fp)

move a0, s0

lw gp, 0x18(fp)

lw a1, (s2)

addiu v0, zero, 0xffb

syscall

beqz a3, 0x46a0

move a0, s1

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

move a0, s1

addiu v0, zero, 0xfa6

syscall

b 0x3fe8

nop

addiu t8, fp, 0x20

addiu v0, fp, 0xbc

move s4, t8

--

addiu v0, fp, 0x148

sw a3, 0x1ac(fp)

addiu t8, t8, 1

bne t8, v0, 0x4df4

sb zero, -1(t8)

lw v0, 0x34(s1)

addiu t8, zero, 0x1000

lw v1, -0x7fd8(gp)

movn t8, v0, v0

lw v0, -obj._dl_pagesize(gp)

sw t8, 0x71d0(v1)

sw t8, (v0)

lw t8, -0x7fd8(gp)

sw zero, 0x71cc(t8)

lw t8, 0x1b0(fp)

lw t8, (t8)

beqz t8, 0x4e38

lw v0, -obj._dl_progname(gp)

sw t8, (v0)

lw v0, 0x4c(s1)

lw t8, -entry0(gp)

bne v0, t8, 0x4e7c

lw a0, -0x7fe4(gp)

lw a1, -0x7fe4(gp)

addiu a0, zero, 2

lw t9, -sym._dl_dprintf(gp)

jalr t9

addiu a1, a1, str.Standalone_execution_is_not_enabled_n

addiu a0, zero, 1

lw gp, 0x18(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x4e7c

lw a0, -0x7fe4(gp)

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lw t9, -sym._dl_getenv(gp)

lw a1, 0x1ac(fp)

addiu a0, a0, str.LD_BIND_NOW

jalr t9

sw zero, 0x154(fp)

addiu t8, zero, 2

movz t8, zero, v0

lw gp, 0x18(fp)

lw v0, 0x5c(s1)

sw t8, 0x158(fp)

--

sw t8, 0x2c(s0)

b 0x52ec

sw t8, (v0)

addiu s3, s3, 1

b 0x5064

addiu s2, s2, 0x20

lw t8, 0x160(fp)

lw v1, 0x15c(fp)

sw t8, 0x110(s0)

lw t8, 0x14(s0)

beqz t8, 0x5310

sw v1, 0x10c(s0)

lw v0, (s0)

addu t8, t8, v0

sw t8, 0x14(s0)

lw a0, -0x7fe4(gp)

move s5, zero

lw t9, -sym._dl_getenv(gp)

lw a1, 0x1ac(fp)

jalr t9

addiu a0, a0, 0x65bc

beqz v0, 0x5364

lw gp, 0x18(fp)

lw a1, -0x7fe4(gp)

addiu a0, zero, 2

lw t9, -sym._dl_dprintf(gp)

jalr t9

addiu a1, a1, str.Use_the_ldd_provided_by_uClibc_n

addiu a0, zero, 1

lw gp, 0x18(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x5364

addiu s5, zero, 1

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

lw s2, -obj._dl_loaded_modules(gp)

addiu t8, zero, 1

lw t9, 0x158(fp)

move s0, zero

lw s6, 0x3c(s1)

lw s3, (s2)

ori t9, t9, 4

sw t8, (s4)

lw v1, -sym._dl_debug_state(gp)

lw v0, -obj._dl_debug_addr(gp)

--

addiu t9, v0, 0x3b4c

jalr t9

lw a3, 0x154(fp)

lw gp, 0x18(fp)

move s0, v0

lhu t8, 0x48(s0)

move s7, s0

addiu t8, t8, 1

b 0x5524

sh t8, 0x48(s0)

move a3, v1

sw v1, 0x164(fp)

move a0, zero

sw s5, 0x10(sp)

addiu a1, fp, 0x154

jalr t9

move a2, s3

lw gp, 0x18(fp)

move s7, v0

bnez v0, 0x5524

lw v1, 0x164(fp)

lw t8, -obj._dl_progname(gp)

addiu a0, zero, 2

lw a1, -0x7fe4(gp)

move a3, v1

lw t9, -sym._dl_dprintf(gp)

lw a2, (t8)

jalr t9

addiu a1, a1, str._s:_cant_load_library__s_n

addiu a0, zero, 0x10

lw gp, 0x18(fp)

addiu v0, zero, 0xfa1

syscall

beqz a3, 0x5524

lw t8, -obj._dl_errno(gp)

sw v0, (t8)

addiu sp, sp, -0x10

lw v0, 0x58(s3)

addiu t8, sp, 0x18

lw v1, 0x15c(fp)

sw s7, 0x1c(sp)

sw v0, 0x18(sp)

sw t8, 0x58(s3)

sw v1, 0x4c(s7)

b 0x53c0

addiu s4, s4, 8

[*] Function printf used 20 times ld-uClibc-0.9.33.so