[*] Binary protection state of kmod

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function system tear down of kmod

mov r0, sb
bl 0xcb50
ldr r0, [sp, 0xc]
bl 0xa164
movs r0, 0
b 0x212e
ldr r3, [0x00002274]
movs r2, 0x1a
ldr r0, [0x0000228c]
mov r1, r4
ldr r3, [r5, r3]
add r0, pc
ldr r3, [r3]
blx sym.imp.lseek64
mov r0, r4
b 0x212e
ldr r3, [0x00002274]
rsbs r0, r0, 0
ldr r3, [r5, r3]
ldr r5, [r3]
blx sym.imp.system
ldr r2, [0x00002290]
mov r3, r0
--
add.w fp, fp, 1
bl 0xcd5c
ldr r3, [sp, 8]
cmp r3, fp
beq 0x24d2
ldr r8, [r4], 4
mov r1, r5
mov r0, r8
blx sym.imp.realloc
mov r2, r6
mov r1, r8
cmp r0, 0
beq 0x23f6
mov r0, sl
bl 0xcabc
b 0x23fc
ldr r3, [sp, 0xc]
rsbs r0, r0, 0
adds r3, 1
str r3, [sp, 0xc]
blx sym.imp.system
ldr r1, [sp, 0x14]
mov r3, r0
mov r2, r8
movs r0, 3
bl 0x85e4
b 0x2446
ldr r1, [sp, 0x18]
movs r0, 3
bl 0x85e4
ldr r3, [sp, 0xc]
adds r3, 1
str r3, [sp, 0xc]
b 0x2446
ldr r3, [sp, 0xc]
rsbs r0, r0, 0
subs r7, r3, 0
it ne
movne r7, 1
blx sym.imp.system
ldr r1, [0x000025e8]
mov r3, r0
--
mov r2, r6
mov r1, sb
bl 0xd050
subs r4, r0, 0
blt 0x2860
ldr r0, [sp, 0x20]
bl 0xcd5c
mov r0, r5
bl 0xa164
mov r0, r6
blx 0x19a0
lsrs r0, r4, 0x1f
b 0x26f2
ldr r1, [0x000028f0]
movs r0, 3
add r1, pc
bl 0x85e4
movs r0, 1
b 0x26f2
rsbs r0, r4, 0
blx sym.imp.system
ldr r1, [0x000028f4]
mov r3, r0
--
mov r0, r6
blx 0x19a0
movs r0, 1
b 0x26f2
rsbs r0, r4, 0
subs r3, r0, 2
cmp r3, 0x14
bhi 0x2882
tbb [0x00002870]
adds r6, r3, r0
lsrs r3, r1, 0xc
lsrs r3, r1, 0xc
lsrs r3, r3, 0xc
lsrs r3, r1, 0xc
lsrs r3, r1, 0xc
lsrs r3, r1, 0xc
lsrs r3, r1, 0xc
lsrs r3, r1, 0xc
lsrs r3, r1, 0xc
movs r5, r2
blx sym.imp.system
mov r3, r0
ldr r1, [0x000028fc]
--
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x24]
eors r2, r3
mov.w r3, 0
bne.w 0x2dd0
mov r0, r6
add sp, 0x2c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
cmp r4, 0
it eq
cmneq r6, 2
it eq
moveq r6, 0
beq 0x2bc6
mov r0, r7
bl 0xcfb4
mov r4, r0
rsbs r0, r6, 0
blx sym.imp.system
ldr r1, [0x00002e28]
mov r3, r0
--
mov r0, r5
bl 0xcd5c
mov r1, r4
ldr r0, [sp, 0x18]
bl 0xa43c
mov r4, r0
cbz r0, 0x36a2
bl 0xcfa8
ldr r3, [sp, 8]
mov r5, r0
ldr r3, [r3]
cmp r3, 0
beq 0x35c0
bl 0xcfb4
blx sym.imp.malloc
b 0x3636
mov r0, r5
bl 0xcfb4
mov sl, r0
rsbs r0, r6, 0
blx sym.imp.system
ldr r1, [0x00003750]
mov r3, r0
--
mov r2, r7
ldr r1, [0x00003a84]
mvn r4, 1
add r3, pc
ldr r0, [r3]
add r1, pc
bl 0x85e4
b 0x38d8
ldr r1, [0x00003a88]
mov r2, r7
ldr r3, [sp, 4]
add r1, pc
ldr r0, [r1]
ldr r1, [0x00003a8c]
add r1, pc
bl 0x85e4
mov r0, r5
blx 0x19a0
b 0x38d8
rsbs r0, r4, 0
blx sym.imp.system
ldr r1, [0x00003a90]
mov r3, r0
--
movs r0, 3
add r1, pc
bl 0x85e4
movs r3, 1
str r3, [sp, 0x18]
b 0x3dac
ldr r3, [0x000045e8]
mov r2, r6
ldr r1, [0x000045ec]
str r4, [sp, 0x18]
add r3, pc
ldr r0, [r3]
add r1, pc
bl 0x85e4
b 0x41ce
ldr r3, [0x000045f0]
rsbs r0, r0, 0
str r4, [sp, 0x18]
add r3, pc
ldr r4, [r3]
blx sym.imp.system
ldr r1, [0x000045f4]
mov r3, r0
mov r2, r6
mov r0, r4
add r1, pc
bl 0x85e4
ldr r0, [r7]
bl 0xcd5c
b 0x41ce
ldr r3, [sp, 0x3c]
rsbs r0, r0, 0
str r3, [sp, 0x18]
ldr r3, [0x000045f8]
add r3, pc
ldr r5, [r3]
blx sym.imp.system
ldr r1, [0x000045fc]
mov r3, r0
--
beq 0x493c
movs r3, 0x2f
add.w r2, sl, 1
strb.w r3, [sb, sl]
movs r3, 0
strb.w r3, [sb, r2]
mov r3, sb
ldr r1, [sp, 0x1c]
bl 0x4754
mov r5, r0
str r0, [sp, 0x14]
mov r0, r4
blx 0x1dc8
cmp r5, 0
beq 0x4928
bge.w 0x478e
ldr r3, [sp, 0x14]
rsbs r0, r3, 0
movs r3, 0
strb.w r3, [sb, sl]
blx sym.imp.system
ldr r1, [0x00004970]
mov r3, r0
--
ldr r5, [r4, 4]
movs r6, 0
ldr r1, [0x00004bc0]
mov r3, r7
mov r2, r4
movs r0, 7
str r5, [sp]
add r1, pc
bl 0x85e4
mov r0, r6
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r2, [sp, 0xc]
ldrb r3, [r6, r2]
cmp r3, 0x2f
itt eq
addeq r2, 1
addeq r0, r6, r2
b 0x4b0c
rsbs r0, r6, 0
blx sym.imp.system
ldr r1, [0x00004bc4]
mov r3, r0
mov r2, sb
movs r0, 3
add r1, pc
bl 0x85e4
ldr r0, [r4, 0xc]
blx 0x19a0
mov r0, r4
blx 0x19a0
mov r0, r6
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
rsbs r0, r6, 0
ldr r5, [r4, 0xc]
blx sym.imp.system
ldr r1, [0x00004bc8]
mov r3, r0
--
add.w r1, sl, 0x44
ldr r0, [r3, 0x1c]
bl 0x904c
mov r0, sl
bl 0x4988
ldr r3, [sp, 0x10]
mov r1, r8
sub.w r2, r3, 0xc
ldr r3, [sp, 8]
ldr r0, [r3, 4]
bl 0xc8c4
subs r4, r0, 0
blt.w 0x59b8
ldr r3, [sp, 0x10]
ldr r0, [sp, 8]
ldr r1, [r3, -0xc]
bl 0x4a80
subs r4, r0, 0
bge.w 0x5658
rsbs r0, r4, 0
blx sym.imp.system
ldr r1, [0x00005a34]
mov r3, r0
--
moveq r8, r5
ldr r7, [r7]
adds r5, 1
cmp r7, 0
bne 0x594a
str.w r8, [sp, 0x1c]
mov r8, sb
ldr r4, [sp, 0x3c]
ldr.w sb, [sp, 0x44]
b 0x58f0
ldr r1, [sp, 0x14]
add.w r0, r4, 0xc
str r2, [sp, 0x3c]
blx sym.imp.uname
ldr r2, [sp, 0x3c]
cmp r0, 0
bne 0x58ce
str r5, [sp, 0xc]
b 0x58f0
rsbs r0, r4, 0
blx sym.imp.system
ldr r1, [0x00005a4c]
mov r3, r0
--
ldr r1, [sp, 0x10]
movs r3, 0x2f
ldr r0, [sp, 0xc]
adds r2, r1, 1
strb r3, [r0, r1]
movs r3, 0
strb r3, [r0, r2]
mov r1, r4
ldr r0, [sp, 8]
mov r3, sl
bl 0x5a5c
mov r7, r0
mov r0, r4
blx 0x1dc8
cmp r7, 0
bge 0x5a98
ldrd r4, r3, [sp, 0xc]
rsbs r0, r7, 0
movs r7, 0
strb r7, [r4, r3]
blx sym.imp.system
ldr r1, [sp, 0x14]
mov r3, r0
--
ldr r2, [sp, 0x40]
mov r3, r7
ldr r1, [sp, 0x38]
movs r0, 3
str r6, [sp]
bl 0x85e4
b 0x634c
ldr r3, [sp, 0x1c]
movs r0, 3
ldr r2, [sp, 0x38]
ldr r1, [sp, 0x44]
str r7, [sp]
bl 0x85e4
b 0x6178
blx sym.imp.__isoc99_sscanf
ldr r7, [r0]
rsbs r7, r7, 0
cmp r7, 0
bge.w 0x612a
rsbs r0, r7, 0
blx sym.imp.system
ldr.w r1, [0x00006924]
mov r2, r0
--
add r1, pc
bl 0x85e4
ldrd r6, r2, [r4, 8]
add.w r8, r6, r2, lsl 2
cmp r6, r8
bhs.w 0x6b26
ldr r3, [0x00006958]
ldr r2, [sp, 0x20]
strd sl, fp, [sp, 0x28]
add r3, pc
ldr r7, [sp, 0x4c]
ldr.w sb, [sp, 0x18]
subw r5, r2, 0xa18
mov sl, r3
str r6, [sp, 0x1c]
b 0x66ca
adds r3, r0, 2
ldr r6, [r4, 4]
beq 0x6716
rsbs r0, r0, 0
blx sym.imp.system
mov r2, r6
mov r3, r0
--
mov r2, r0
mov r0, r5
mov r5, r2
blx 0x1c84
cmp.w r8, 0
orr.w r5, r5, r0
blt.w 0x73ac
ldr r4, [r4]
mov r2, sl
mov r1, r6
mov r0, sl
ldr r3, [r4]
blx 0x1d68
cmp r0, 0
bne.w 0x738a
cmp r5, 0
beq 0x6e1c
ldr r4, [r4]
movs r0, 0x1c
ldr.w fp, [sp, 0x28]
blx sym.imp.system
ldr.w r1, [0x000076b0]
mov r2, r4
--
add r1, pc
bl 0x85e4
ldr r3, [sp, 0x40]
strb r3, [r6, 0xa]
b.w 0x6224
ldr.w r1, [0x000076c8]
movs r0, 7
add r1, pc
bl 0x85e4
b 0x6c88
ldr.w r1, [0x000076cc]
movs r0, 6
str.w sl, [sp]
ldr r3, [r7]
ldr r2, [sp, 0x2c]
add r1, pc
bl 0x85e4
b.w 0x6538
blx sym.imp.__isoc99_sscanf
ldr r0, [r0]
blx sym.imp.system
ldr.w r1, [0x000076d0]
mov r2, r0
--
subw r3, r3, 0xaa4
ldr r1, [r3, 0xc]
cmp r1, 0
beq.w 0x664c
ldr r3, [r3, 8]
mov r0, r8
subs r3, 4
ldr r2, [r3, 4]!
strh r0, [r2, 0x38]
adds r0, 1
cmp r0, r1
bne 0x7096
b.w 0x664c
ldr.w r1, [0x000076dc]
movs r0, 2
add r1, pc
bl 0x85e4
b.w 0x5e46
rsbs r0, r0, 0
ldr.w fp, [sp, 0x1c]
blx sym.imp.system
ldr.w r1, [0x000076e0]
mov r3, r0
mov r2, r7
movs r0, 2
add r1, pc
bl 0x85e4
b.w 0x629c
rsbs r0, r0, 0
ldr.w fp, [sp, 0x1c]
blx sym.imp.system
ldr.w r1, [0x000076e4]
mov r3, r0
mov r2, r7
movs r0, 2
add r1, pc
bl 0x85e4
ldr.w r0, [r8]
bl 0xcd5c
b.w 0x629c
ldr.w sl, [sp, 0x2c]
ldr.w fp, [sp, 0x1c]
b.w 0x65b2
rsbs r0, r0, 0
blx sym.imp.system
ldr.w r1, [0x000076e8]
mov r2, r0
--
strd r2, r1, [sp]
mov r3, r6
ldr.w r1, [0x000076f0]
movs r0, 3
ldr r2, [sp, 0x1c]
add r1, pc
bl 0x85e4
b 0x6e14
blx sym.imp.__isoc99_sscanf
ldr r3, [r0]
ldr r0, [r7, 0x1c]
rsbs r7, r3, 0
bl 0x8c50
b 0x6f96
ldr.w r1, [0x000076f4]
ldr r0, [sp, 0x34]
add r1, pc
bl 0x5590
b.w 0x6580
rsbs r0, r0, 0
blx sym.imp.system
ldr.w r1, [0x000076f8]
mov r2, r0
--
mov r3, r6
add r1, pc
str r2, [sp]
ldr.w fp, [sp, 0x28]
rsbs r4, r4, 0
bl 0x85e4
b 0x6efe
ldr r2, [sp, 0x3c]
mov r1, r6
mov r0, sl
ldr.w fp, [sp, 0x28]
mov r4, r8
blx 0x1984
cmp r0, 0
bne.w 0x74ee
ldr r3, [0x00007708]
rsbs r0, r4, 0
add r3, pc
ldr r3, [r3]
ldr r4, [r3]
blx sym.imp.system
ldr r1, [0x0000770c]
mov r3, r0
--
b 0x6e14
ldr r1, [0x00007734]
mov r2, r5
movs r0, 3
add r1, pc
bl 0x85e4
b.w 0x6780
mov sb, r6
mov r7, r6
b 0x7462
blx sym.imp.__isoc99_sscanf
ldr r1, [0x00007738]
ldr r6, [r0]
movs r0, 7
ldr r2, [sp, 0x40]
add r1, pc
bl 0x85e4
cmp r6, 0
ble.w 0x6224
mov r0, r6
blx sym.imp.system
ldr r1, [0x0000773c]
mov r3, r0
ldr r2, [sp, 0x40]
movs r0, 2
add r1, pc
bl 0x85e4
b.w 0x5e46
ldr r1, [0x00007740]
movs r0, 3
add r1, pc
bl 0x85e4
b.w 0x6538
blx sym.imp.__isoc99_sscanf
ldr r1, [0x00007744]
ldr r6, [r0]
movs r0, 7
ldr r2, [sp, 0x38]
add r1, pc
bl 0x85e4
cmp r6, 0
ble.w 0x6224
mov r0, r6
blx sym.imp.system
ldr r1, [0x00007748]
mov r3, r0
--
mov r0, r7
bl 0x4694
mov r0, r6
bl 0x92a0
ldr r2, [0x00007e98]
ldr r3, [0x00007e80]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr.w r3, [sp, 0x42c]
eors r2, r3
mov.w r3, 0
bne 0x7e76
mov r0, r4
addw sp, sp, 0x434
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
mov r0, r7
mvn r4, 0xb
bl 0x4694
movs r0, 0xc
blx sym.imp.system
ldr r1, [0x00007e9c]
mov r2, r0
--
movs r6, 0
add.w sl, sp, 0x20
add.w sb, sp, 0x18
b 0x9910
ldr r1, [sl, -0x8]
adds r6, 1
ldr r0, [r5]
bl 0xa350
ldr r4, [r4]
str r0, [r5]
cbz r4, 0x9942
mov r3, sb
add.w r2, r4, 0xc
mov r1, r8
mov r0, r7
bl 0xca04
subs r3, r0, 0
bge 0x98fe
rsbs r0, r3, 0
str r3, [sp, 0x14]
blx sym.imp.system
ldr r3, [sp, 0x14]
mov r1, r6
--
blx 0x19a0
ldr r2, [0x00009db4]
ldr r3, [0x00009db0]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 4]
eors r2, r3
mov.w r3, 0
bne 0x9d92
mov r0, r5
add sp, 0xc
pop {r4, r5, r6, r7, pc}
mov r5, r4
b 0x9d5c
ldr r0, [r5, 0x14]
bl 0x9a64
mov r4, r0
b 0x9d32
rsbs r0, r5, 0
blx sym.imp.system
b 0x9d5c
blx sym.imp.stat64
--
subs r4, r0, 0
blt 0x9e82
ldr r1, [sp]
ldr r0, [r6]
bl 0xa350
mov r1, r7
str r0, [r6]
ldr r0, [sp]
bl 0xcb70
mov r0, r7
blx 0x19a0
b 0x9e22
mov r0, r5
bl 0x99cc
mov r7, r0
cmp r7, 0
bne 0x9e4a
mov r4, r7
b 0x9e6a
rsbs r0, r4, 0
blx sym.imp.system
b 0x9e6a
blx sym.imp.stat64
--
eors r2, r3
mov.w r3, 0
bne 0x9f48
mov r0, sl
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
mov r1, r5
ldr r3, [sp, 4]
mov r2, r6
mov r0, fp
bl 0xca04
subs r5, r0, 0
blt 0x9f30
ldr r1, [sp, 8]
add.w sl, sl, 1
ldr.w r0, [sb]
bl 0xa350
str.w r0, [sb]
b 0x9ee6
rsbs r0, r5, 0
blx sym.imp.system
mov r1, sl
ldr.w r0, [sb]
--
mov r2, sp
mov r0, r7
mov r5, r3
bl 0xcabc
subs r4, r0, 0
blt 0xa048
ldr r1, [sp]
ldr.w r0, [r8]
bl 0xa350
mov r3, r0
cbz r0, 0xa042
ldr r0, [sp]
mov r1, r5
str.w r3, [r8]
movs r4, 1
bl 0xd5ec
b 0x9fba
mvn r4, 0xb
b 0x9fba
rsbs r0, r4, 0
blx sym.imp.system
b 0x9fba
blx sym.imp.stat64
--
blx sym.imp.mmap64
ldr r2, [sp, 0x28]
ldr r3, [sp, 0x48]
strb r3, [r6, r2]
adds r2, 1
adds r3, r6, r2
str r3, [sp, 0x34]
ldrb r6, [r5, -0x1]
b 0xb146
str r3, [sp, 0x48]
mov r1, r7
ldr r3, [sp, 0x30]
ldr r6, [sp, 0x34]
ldr r0, [r3, 8]
ldr r3, [sp, 0x44]
str.w r6, [r0, r3, lsl 2]
adds r3, 1
str r3, [sp, 0x44]
b 0xb258
rsbs r0, r6, 0
blx sym.imp.system
b 0xae1a
mov r7, r5
--
mvn r5, 0x15
ldr r2, [0x0000c7b8]
add.w r1, sp, 0x1080
ldr r3, [0x0000c7b0]
adds r1, 0x14
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
mov.w r3, 0
bne 0xc7a8
mov r0, r5
add.w sp, sp, 0x1080
add sp, 0x18
pop.w {r4, r5, r6, r7, r8, pc}
blx sym.imp.__isoc99_sscanf
ldr r4, [r0]
mov r0, r4
rsbs r5, r4, 0
blx sym.imp.system
cmp r6, 0xa
ble 0xc758
add.w r8, sp, 0x98
movs r2, 0
add.w r3, r8, r6
mov r0, r7
add r1, sp, 8
strb r2, [r3, -0xe]
blx sym.imp.realloc
cbnz r0, 0xc758
ldr r3, [sp, 0x18]
and r3, r3, 0xf000
cmp.w r3, 0x4000
beq 0xc788
mov r0, r4
blx sym.imp.system
b 0xc6fc
ldrh r3, [r7, 4]
--
movt r3, 0x696d
cmp r2, r3
bne 0xc6e8
ldr r2, [r7, 4]
movw r3, 0x676e
movt r3, 0xa
cmp r2, r3
bne 0xc6e8
movs r5, 2
b 0xc6fc
ldrh r2, [r6]
movw r3, 0xa67
cmp r2, r3
bne 0xc6f8
ldrb r3, [r6, 2]
movs r5, 3
cmp r3, 0
beq 0xc6fc
b 0xc6f8
rsbs r0, r5, 0
blx sym.imp.system
b 0xc6fc
blx sym.imp.stat64
--
mov r0, r4
bl 0xc7e4
str r0, [r7]
ldr r2, [0x0000ca00]
add.w r1, sp, 0x1060
ldr r3, [0x0000c9fc]
adds r1, 0x1c
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
mov.w r3, 0
bne 0xc9f2
mov r0, r6
add.w sp, sp, 0x1080
pop.w {r4, r5, r6, r7, r8, sb, sl, pc}
blx sym.imp.__isoc99_sscanf
ldr r0, [r0]
rsbs r6, r0, 0
blx sym.imp.system
mov r0, r5
blx 0x19a0
--
eors r2, r3
mov.w r3, 0
bne 0xcd24
mov r0, r4
add.w sp, sp, 0x1020
add sp, 4
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldrb r3, [r4]
cmp r3, 0x2f
beq 0xcd0e
mov r0, r4
blx 0x1bb0
ldr r3, [sp]
add r3, r0
cmp.w r3, 0x1000
blo 0xcd00
movs r4, 0
b 0xccaa
rsbs r0, r4, 0
ldr r6, [sp, 0xc]
blx sym.imp.system
b 0xcc98
ldr r6, [sp, 0xc]
--
lsls r3, r7, 0x1f
bmi 0xd106
mov r0, r5
bl 0xefa8
mov r5, r0
b 0xd0b4
ldr r6, [0x0000d134]
add r6, pc
b 0xd05c
ldr r0, [r4]
bl 0xe87c
str r0, [r4, 0x24]
cmp r0, 0
bne 0xd072
b 0xd0ca
mov r0, r5
bl 0xf670
cmp r0, 0
bge 0xd0e8
rsbs r0, r0, 0
blx sym.imp.system
b 0xd0e8
ldr r1, [0x0000d138]
add r1, pc
bl 0xf474
cmp r0, 0
bge 0xd0e4
rsbs r0, r0, 0
blx sym.imp.system
b 0xd0e4
mvn r5, 1
--
ldr r4, [r4]
cmp r4, r3
bne 0xd47a
ldr r0, [sp, 4]
bl 0xcb50
ldr r0, [sp, 8]
bl 0xcb50
ldr r2, [0x0000d4e8]
ldr r3, [0x0000d4e4]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0xd4da
mov r0, r5
add sp, 0x14
pop {r4, r5, r6, r7, pc}
rsbs r0, r5, 0
blx sym.imp.system
b 0xd4a0
mov r0, r7
--
mov r4, r3
blx 0x1c84
ldr r3, [sp, 4]
str.w r8, [r3]
ldr r2, [0x0000d748]
add.w r1, sp, 0x1000
ldr r3, [0x0000d738]
adds r1, 0x14
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
mov.w r3, 0
bne 0xd720
mov r0, r4
add.w sp, sp, 0x1000
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
rsbs r0, r0, 0
blx sym.imp.system
b 0xd698
ldr r0, [r5, -0xc]
bl 0xcd5c
b 0xd698
mvn r4, 1
b 0xd6e2
blx sym.imp.stat64
blx sym.imp.__isoc99_sscanf
ldr r0, [r0]
rsbs r4, r0, 0
blx sym.imp.system
b 0xd6e2
nop
--
mov r1, sb
blx sym.imp.opendir
mov r4, r0
cmp r0, 0
beq 0xdd30
movs r2, 0xa
sub.w r1, r5, 8
blx 0x193c
ldr r3, [r5, -0x8]
cmp r3, r4
beq 0xdd30
ldrb r3, [r3]
cmp r3, 0
bne 0xdd30
str r0, [r5, -0x10]
b 0xdd30
blx sym.imp.stat64
blx sym.imp.__isoc99_sscanf
ldr r0, [r0]
rsbs r4, r0, 0
blx sym.imp.system
mov r0, r8
blx 0x1dbc
--
ldrge r4, [r6, -0x8]
blt 0xde8a
ldr r2, [0x0000dea8]
add.w r1, sp, 0x1000
ldr r3, [0x0000dea0]
adds r1, 0xc
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
mov.w r3, 0
bne 0xde98
mov r0, r4
add.w sp, sp, 0x1000
add sp, 0x10
pop {r4, r5, r6, pc}
blx sym.imp.__isoc99_sscanf
ldr r0, [r0]
rsbs r4, r0, 0
blx sym.imp.system
b 0xde58
rsbs r0, r4, 0
blx sym.imp.system
b 0xde58
mvn r4, 1
--
cmp r0, 0
bne 0xdf10
mov r0, r6
blx 0x1dc8
ldr r2, [0x0000dfbc]
add.w r1, sp, 0x1000
ldr r3, [0x0000dfb4]
adds r1, 0xc
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
mov.w r3, 0
bne 0xdfaa
mov r0, r4
add.w sp, sp, 0x1000
add sp, 0x10
pop.w {r4, r5, r6, r7, r8, pc}
rsbs r0, r0, 0
blx sym.imp.system
mov r0, r6
blx 0x1dc8
mov r0, r4
movs r4, 0
bl 0xcb50
b 0xdf4e
ldr r0, [r7, -0x8]
bl 0xcd5c
b 0xdf7a
mov r4, r0
b 0xdf4e
blx sym.imp.__isoc99_sscanf
ldr r0, [r0]
mov r4, r6
blx sym.imp.system
b 0xdf4e
mov r4, r0
--
ite lt
movlt r0, 1
movge r0, 0
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x24]
eors r2, r3
mov.w r3, 0
bne 0x10ebe
add sp, 0x2c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldrd sl, r5, [r6, 0x18]
b 0x10e5c
mov sb, r5
ldr.w sl, [r6, 0x18]
ldr r5, [r6, 0x1c]
mov r8, r4
b 0x10e5c
blx sym.imp.__isoc99_sscanf
ldr r0, [r0]
blx sym.imp.system
b 0x10e50
mov sl, r4
--
mov r5, r0
movs r0, 0
str r7, [r5]
ldr r2, [0x00010f8c]
ldr r3, [0x00010f88]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x14]
eors r2, r3
mov.w r3, 0
bne 0x10f7e
add sp, 0x1c
pop {r4, r5, r6, r7, pc}
blx sym.imp.__isoc99_sscanf
orrs.w r1, r4, r6
ldr r7, [r0]
mov r5, r0
beq 0x10f32
mov r0, r7
blx sym.imp.system
b 0x10f32
mov r2, r4

[*] Function system used 51 times kmod