[*] Binary protection state of netd_migrate
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function system tear down of netd_migrate
sub sp, 0x10
ldr r4, [0x0000352c]
ldr r3, [0x00003530]
add r4, pc
ldr r3, [r4, r3]
ldr r3, [r3]
str r3, [sp, 0xc]
mov.w r3, 0
movs r3, 0
str r3, [sp, 8]
cbz r0, 0x34dc
mov r5, r1
cmp r1, 0
beq 0x34f4
mov r6, r2
cmp r2, 0
beq 0x350e
mov r4, r0
ldr r0, [0x00003534]
add r0, pc
blx sym.imp.policykit_system_reload_service
add r2, sp, 8
mov r1, r0
--
ldr r0, [r0]
blx 0x2220
add.w r1, r6, 0x3b0
ldr r6, [0x000040c4]
mov r2, r0
movs r0, 3
bl 0x4ff4
add r6, pc
mov r0, r5
mov r1, r6
blx 0x2398
mov r1, r6
mov r0, r8
blx 0x2398
b 0x3cc8
mov r0, r4
blx 0x2208
ldr r3, [sp, 0x14]
ldr r1, [sp, 0x38]
add.w r0, r3, 0x398
blx sym.imp.policykit_system_reload_service
mov r4, r0
cmp r4, 0
--
mov r0, r5
blx 0x2208
mov r0, r4
pop {r4, r5, r6, pc}
orrs r6, r6
movs r0, r0
push.w {r4, r5, r6, r7, r8, lr}
mov r4, r0
sub sp, 8
movs r0, 1
bl 0x5b00
mov r5, r0
movs r0, 2
bl 0x5b00
cbz r4, 0x41da
ldr.w r8, [0x00004248]
mov r1, r4
mov r7, r0
add r8, pc
add.w r0, r8, 0x88
blx sym.imp.policykit_system_reload_service
mov r6, r0
mov r0, r5
--
mov r1, r4
mov r0, r7
blx 0x27b4
cmp r0, 1
beq 0x41c2
ldrb r3, [r7]
cbnz r3, 0x4236
mov r0, r4
blx sym.imp.g_clear_error
mov r4, r0
mov r1, r4
movs r0, 2
bl 0x5aec
mov r0, r4
blx 0x2208
bl 0x40c8
b 0x41c2
mov r2, r4
add.w r0, r8, 0xc4
mov r1, r7
blx sym.imp.policykit_system_reload_service
mov r4, r0
b 0x4222
--
bne 0x474e
ldr r2, [0x0000486c]
ldr r3, [0x00004858]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x484e
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
add.w r0, r8, 0xf4
blx sym.imp.g_clear_error
ldr r3, [r7, 8]
mov r5, r0
ldr r2, [r3]
cbz r2, 0x47c2
mov r1, r0
add.w r0, r8, segment.NOTE
blx sym.imp.policykit_system_reload_service
mov r3, r0
mov r0, r5
mov r5, r3
blx 0x2208
ldr r3, [r7, 8]
ldr r2, [r3, 4]
cbz r2, 0x47de
ldr r3, [sp, 4]
mov r1, r5
add.w r0, r3, segment.NOTE
blx sym.imp.policykit_system_reload_service
mov r3, r0
mov r0, r5
mov r5, r3
blx 0x2208
ldr r3, [r7, 8]
ldr r2, [r3, 8]
cbz r2, 0x47f4
mov r1, r5
mov r0, sl
blx sym.imp.policykit_system_reload_service
mov r7, r0
mov r0, r5
--
blx 0x2434
ldr r1, [0x00004c98]
movw r2, 0x279
mov r0, r7
add r1, pc
add.w r4, r1, 0x2e0
add.w r3, r1, 0x2b0
str r4, [sp]
adds r1, 0x10
blx 0x2434
mov r0, r4
mov r1, r5
bl 0x4448
mov r4, r0
cmp r0, 0
beq 0x4bda
ldr.w sb, [0x00004c9c]
mov r1, r6
add sb, pc
add.w r0, sb, 0x2f0
blx sym.imp.policykit_system_reload_service
mov r1, r6
mov r5, r0
add.w r0, sb, 0x2f4
blx sym.imp.policykit_system_reload_service
mov r3, r0
mov r0, r7
--
beq 0x4c4a
ldr r0, [r4]
cbnz r0, 0x4b66
b 0x4c60
ldr r0, [r4]
mov r1, r7
blx 0x2604
cbnz r0, 0x4b70
ldr r0, [r4, 4]!
cmp r0, 0
beq 0x4c60
mov r1, r5
blx 0x2604
cmp r0, 0
beq 0x4b54
ldr r0, [0x00004ca0]
mov r2, r8
mov r1, r5
add r0, pc
add.w r0, r0, 0x328
blx sym.imp.policykit_system_reload_service
mov sb, r0
ldr r0, [r4]
--
cbz r0, 0x4dfe
bl 0x4710
ldr r3, [0x00004e98]
ldr r0, [r4, 8]
ldr.w r1, [r8, r3]
blx 0x2398
movs r3, 0
str r3, [r4, 8]
ldr r3, [0x00004e9c]
add r3, pc
ldr r5, [r3, 4]
cbz r5, 0x4e6e
ldr r6, [0x00004ea0]
ldr.w sb, [0x00004ea4]
add r6, pc
add sb, pc
add.w r7, r6, 0x430
ldr.w sl, [r5]
mov r0, r7
mov r1, sl
blx sym.imp.policykit_system_reload_service
mov r2, sl
add.w r1, r6, 0x14c
--
movs r1, 0
blx 0x283c
mov r4, r0
cmp r0, 0
beq 0x5d46
blx 0x2854
ldr r7, [0x00005efc]
movs r2, 0
ldr r3, [0x00005f00]
mov fp, r0
str r2, [r0]
add r7, pc
ldr r0, [r6, r3]
add.w sl, r7, 0x478
blx 0x22bc
add.w r7, r7, 0x490
mov r6, r0
b 0x5dc2
mov r1, sl
mov r0, r7
blx sym.imp.policykit_system_reload_service
mov r1, r0
mov r0, r6
--
pop.w {r4, r5, r6, r8, pc}
mov r3, r8
mov r0, r8
b 0x61f2
blx 0x2670
ldr r3, [0x000065e4]
movs r1, r0
lsls r0, r0, 9
movs r0, r0
ldr r3, [0x000064f4]
movs r1, r0
push.w {r4, r5, r6, r8, sb, lr}
cbz r0, 0x627e
ldr.w r8, [0x0000628c]
mov r4, r0
movs r6, 0
add r8, pc
add.w sb, r8, 0x40
add.w r8, r8, 0x110
b 0x6250
blx sym.imp.policykit_system_reload_service
mov r3, r0
mov r0, r6
--
movw r1, 0x8041
str.w r8, [sl]
blx 0x2214
adds r3, r0, 1
mov r5, r0
beq 0x64e8
ldr.w fp, [0x00006568]
add fp, pc
add.w r1, fp, 0x164
blx 0x25b0
mov r6, r0
cmp r0, 0
beq.w 0x6544
mov r3, r4
add.w r2, fp, 0x168
movs r1, 1
blx 0x2688
cmp r0, 0
blt 0x6518
mov r0, r6
blx sym.imp.system
cmp r0, 0
beq 0x6510
--
blx 0x26f8
str.w r8, [sl]
movs r0, 0
add sp, 8
pop.w {r4, r5, r6, r8, sb, sl, fp, pc}
movs r0, 1
add sp, 8
pop.w {r4, r5, r6, r8, sb, sl, fp, pc}
blx 0x241c
ldr.w fp, [sl]
mov r4, r0
mov r0, fp
blx sym.imp.g_bus_unown_name
mov r2, fp
mov r3, r0
mov r1, r4
mov r0, sb
blx 0x26f8
mov r0, r6
str.w r8, [sl]
blx sym.imp.system
cmp r0, 0
bne 0x6476
--
push {r4, r5, r6, lr}
sub sp, 0x30
add ip, pc
add r6, sp, 0xc
mov r4, r0
mov r5, r1
ldr.w r3, [ip, r3]
mov r0, r6
ldr r3, [r3]
str r3, [sp, 0x2c]
mov.w r3, 0
blx 0x23a4
str r5, [sp, 8]
cbz r4, 0x6758
movs r0, 4
add r3, sp, 8
str r0, [sp, 0xc]
mov r2, r6
mov r1, r5
mov r0, r4
blx sym.imp.policykit_system_stop_service
cbz r0, 0x674e
blx 0x23b0
--
movs r0, r0
cmp sl, sl
movs r1, r0
adds r0, 0xc
movs r0, r0
cmp r7, 0xf6
movs r0, r0
cmp r7, 0xe2
movs r0, r0
push.w {r4, r5, r6, r8, lr}
sub sp, 0xc
cmp r0, 0
beq 0x6996
mov r8, r1
cmp r1, 0
beq.w 0x69ae
mov r4, r0
ldr r0, [0x000069c8]
add r0, pc
add.w r0, r0, 0x324
blx sym.imp.policykit_system_reload_service
mov r6, r0
ldr r0, [r4]
--
movs r0, r0
ldr.w ip, [0x00006dbc]
push {r4, r5, lr}
mov r4, r0
ldr r0, [0x00006dc0]
sub sp, 0x14
add ip, pc
movs r5, 0
ldr.w r0, [ip, r0]
ldr r0, [r0]
str r0, [sp, 0xc]
mov.w r0, 0
str r5, [sp, 8]
cmp r1, 0
beq 0x6d68
cmp r2, 0
beq 0x6d82
ldr r0, [0x00006dc4]
add r0, pc
addw r0, r0, 0x534
blx sym.imp.policykit_system_reload_service
mov r5, r0
subs r3, r4, 1
--
blx sym.imp.g_key_file_to_data
mov r4, r0
b 0x6d08
add r1, sp, 8
mov r0, r5
blx 0x2538
mov r4, r0
b 0x6d08
mov r0, r1
ldr r1, [0x00006dd0]
movw r2, 0x362
add r1, pc
addw r4, r1, 0x524
addw r3, r1, 0x50c
str r4, [sp]
adds r1, 0x74
blx 0x2434
ldr r0, [0x00006dd4]
add r0, pc
addw r0, r0, 0x544
blx sym.imp.policykit_system_reload_service
mov r5, r0
b 0x6cf0
[*] Function system used 19 times netd_migrate
