[*] Binary protection state of zabbix_agentd
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of zabbix_agentd
mov r2, r7
add r1, pc
mov r0, r5
bl sym.zbx_json_value_by_name_dyn
cbnz r0, 0xef54
ldr r3, [sp, 0x20]
subw r3, r3, 0xe24
ldr r3, [r3]
ldrb r3, [r3]
cbnz r3, 0xef70
ldr r2, [sp, 0x20]
mov r0, r7
movs r7, 0
mov r1, fp
subw r3, r2, 0xe28
subw r2, r2, 0xde8
str r7, [r2]
ldr r2, [sp, 0x2c]
ldr r3, [r3]
subs r2, 0x28
bl sym.zbx_strcpy_alloc
ldr.w fp, [sp, 0x30]
movs r3, 0
--
ldr.w sl, [0x0001046c]
str r3, [sp]
ldr r1, [0x00010470]
ldr r3, [0x00010474]
add sl, pc
mov r0, sl
ldr r2, [sp, 0x18]
add r1, pc
add r3, pc
str r1, [sp, 0x24]
bl sym.zbx_strncpy_alloc
ldr r0, [sp, 0x18]
ldr r3, [sp, 0x20]
ldr r1, [sp, 0x24]
ldr r2, [r0]
ldr r3, [r3]
adds r2, 1
str r2, [r0]
mov r2, r0
mov r0, sl
bl sym.zbx_strcpy_alloc
ldr r3, [sp, 0x14]
ldr r0, [sp, 0x18]
--
mov r4, r0
cmp r0, 0
beq.w 0x175b2
sub.w r3, r4, sl
mov r2, r8
str r3, [sp]
mov r1, sb
mov r3, sl
mov r0, r7
bl sym.zbx_strncpy_alloc
ldrb r3, [r4, 1]
cmp r3, 0
beq 0x17308
cmp r3, 0x30
add.w r4, r4, 1
bne 0x1730e
ldr r3, [sp, 0x14]
mov r2, r8
mov r1, sb
mov r0, r7
bl sym.zbx_strcpy_alloc
b 0x17324
mov r0, r5
--
mov r2, sb
mov sb, sl
mov sl, r2
ldr.w r2, [r8]
sxth.w ip, r3
ldrh.w r2, [r2, ip, lsl 1]
lsls r0, r2, 0x11
bpl 0x17510
mov r2, r7
mov r1, sb
mov r0, fp
bl sym.zbx_chrcpy_alloc
cbz r4, 0x17522
ldr r3, [sp, 8]
cmp r3, r6
beq 0x17508
mov r3, sl
mov r2, r7
mov r1, sb
mov r0, fp
bl sym.zbx_strcpy_alloc
mov r3, r4
ldrb r4, [r6, 1]!
--
ldr r6, [sp, 0xc]
mov r3, r4
ldr r0, [0x00017710]
movs r2, 0
mvn r4, 1
ldr r1, [r6, 0x28]
add r0, pc
orr r1, r1, 0x20
str r1, [r6, 0x28]
mov.w r1, 0x488
bl sym.zbx_strdup2
str r0, [r6, 0x20]
b 0x173f4
ldrb r1, [r6, 1]!
cmp r1, 0
bne 0x17492
mov r3, fp
mov r2, r8
mov r1, sb
mov r0, r7
bl sym.zbx_strcpy_alloc
b 0x17324
ldr r6, [sp, 0xc]
movs r2, 0
ldr r3, [0x00017714]
mvn r4, 1
ldr r0, [0x00017718]
ldr r1, [r6, 0x28]
add r3, pc
add r0, pc
orr r1, r1, 0x20
str r1, [r6, 0x28]
movw r1, 0x46e
bl sym.zbx_strdup2
str r0, [r6, 0x20]
b 0x173f4
bl sym.zbx_alias_get
b 0x17288
mov r1, sb
mov r3, sl
mov r2, r8
mov r0, r7
ldr r6, [sp, 0x24]
bl sym.zbx_strcpy_alloc
mov r0, r5
bl 0x1642c
--
b 0x178d6
ldr r3, [r6]
adds r4, 0x10
ldr r5, [r3, r4]
cmp r5, 0
beq 0x17950
mov r1, r7
mov r0, r5
blx 0xbc58
cmp r0, 0
beq 0x178cc
movs r0, 0
add.w fp, sp, 8
add.w sl, sp, 4
mov r8, sp
mov r3, r5
mov r2, fp
str r0, [sp, 8]
mov r1, sl
mov r0, r8
bl sym.zbx_strcpy_alloc
ldr.w r2, [sb]
add r2, r4
ldr r3, [r2, 4]
lsls r3, r3, 0x1d
bmi 0x17936
ldr r3, [r2, 0xc]
cbz r3, 0x17936
movs r3, 0x5b
mov r2, fp
mov r1, sl
mov r0, r8
bl sym.zbx_chrcpy_alloc
ldr.w r3, [sb]
mov r2, fp
mov r1, sl
mov r0, r8
add r3, r4
ldr r3, [r3, 0xc]
bl sym.zbx_strcpy_alloc
mov r2, fp
mov r1, sl
--
ble.w 0x23c14
vldr s15, [fp]
vcvt.f64.s32 d8, s15
bl sym.zbx_time
vsub.f64 d0, d0, d9
vcmpe.f64 d8, d0
vmrs apsr_nzcv, fpscr
bmi.w 0x23c5a
add r8, r6
cmp.w r8, 0x10000
bgt.w 0x23c8c
mov r1, r6
mov r2, sl
mov r0, sb
bl sym.convert_to_utf8
mov r6, r0
mov r3, r0
ldr r2, [sp, 4]
sub.w r0, r4, 0x9c
ldr r1, [sp, 8]
bl sym.zbx_strcpy_alloc
cmp r6, 0
beq 0x23af0
--
movs r4, 1
b 0x280f6
ldr r3, [sp, 0x28]
adds r3, 1
bne 0x282ba
ldr r0, [sp, 0x18]
mov.w r4, -1
cmp r0, 0
beq.w 0x28120
blx sym.imp.gai_strerror
b 0x28120
adds r3, r1, 1
mov r4, r1
b 0x280ec
ldr r0, [sp, 0x10]
mov r3, fp
add r2, sp, 0x24
add r1, sp, 0x28
strd r4, r4, [sp, 0x24]
movs r4, 1
bl sym.zbx_strcpy_alloc
b 0x28120
ldr r3, [sp, 0x28]
--
strh r5, [r1, 0x2c]
strb r5, [r7, 0x15]
str r5, [sp, 0x274]
cmp r6, 0xa5
ldr r0, [sp, 8]
ldr r2, [0x00031520]
ldr r3, [0x00031510]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x14]
eors r2, r3
mov.w r3, 0
bne.w 0x314f8
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r3, [r6, 4]
mov r2, fp
mov r1, r8
mov r0, r7
bl sym.zbx_strcpy_alloc
ldr r3, [r5, 4]
adds r4, 1
cmp r3, r4
ble 0x313b4
ldr r0, [r5]
mov r2, fp
ldr r3, [0x00031524]
mov r1, r8
ldr.w r6, [r0, r4, lsl 2]
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x31392
mov r3, sl
mov r2, fp
mov r1, r8
mov r0, r7
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031528]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x0003152c]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031530]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031534]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031538]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x0003153c]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031540]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031544]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031548]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x0003154c]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031550]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031554]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x00031558]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
ldr r3, [0x0003155c]
mov r2, fp
mov r1, r8
mov r0, r7
add r3, pc
bl sym.zbx_strcpy_alloc
b 0x313de
mov r3, sb
mov r2, fp
mov r1, r8
mov r0, r7
bl sym.zbx_strcpy_alloc
b 0x313de
blx 0xbe48
ldr r3, [sp, 4]
mov r2, fp
mov r1, r8
mov r0, r7
bl sym.zbx_strcpy_alloc
b 0x313de
nop
--
subs r4, r0, 3
mov r1, r8
adds r0, r6, r4
blx 0xbc58
cbnz r0, 0x34476
str r4, [sp]
mov r3, r6
ldr r4, [0x00034494]
add r6, sp, 0xc
mov r2, r6
add r4, pc
add.w r8, r4, 4
add.w r7, r4, 8
mov r1, r8
mov r0, r7
bl sym.zbx_strncpy_alloc
add.w r3, r5, sb
mov r2, r6
mov r1, r8
mov r0, r7
bl sym.zbx_strcpy_alloc
b 0x343dc
ldr r6, [r6]
--
ldr.w r3, [sb]
cmp r3, 3
bgt.w 0x3fb94
ldr r8, [r4, -0xc]
cmp.w r8, -1
beq.w 0x3fc7c
add r5, sp, 0x3c
mov.w fp, 0
sub.w sl, r4, 0x18
b 0x3fa2e
ldr r3, [r4, -0x18]
add r3, r0
cmp.w r3, 0x80000
bhs 0x3fb00
add r0, r4
mov r3, r5
strb fp, [r0, -0x4]
mov r2, sl
sub.w r1, r4, 0x1c
sub.w r0, r4, 0x14
bl sym.zbx_strcpy_alloc
movw r2, 0xfff
mov r1, r5
--
beq.w 0x40956
ldr r3, [sp, 0xc]
add.w r0, fp, r1
mov r2, fp
subs r3, 4
mov r1, r3
str r3, [sp, 0x24]
b 0x40798
strb r3, [r2], 1
cmp r2, r0
beq.w 0x40956
ldr r3, [r1, 4]!
cmp r3, 0x7f
bls 0x4078e
ldr r3, [0x00040a74]
mov.w sb, 0
ldrd r1, r2, [sp, 0x18]
mov sl, sb
ldr r0, [sp, 0x14]
add r3, pc
bl sym.zbx_strcpy_alloc
ldr r2, [sp, 0x24]
b 0x407ba
--
addls r1, 0x61
uxtbls r1, r1
bls 0x408f6
sub.w r3, r1, 0x1a
cmp r3, 9
bls 0x408f2
ldr r0, [0x00040a84]
mov r2, fp
ldr r1, [sp, 0x28]
ldr r3, [sp, 0x2c]
add r0, pc
bl sym.zbx_error
bl sym.zbx_backtrace
movs r1, 0
b 0x408f6
movs r3, 0
strb.w r3, [fp, r4]
ldr r0, [sp, 0x14]
mov r3, fp
ldrd r1, r2, [sp, 0x18]
bl sym.zbx_strcpy_alloc
movs r0, 0
ldr r2, [0x00040a88]
[*] Function strcpy used 33 times zabbix_agentd
