[*] Binary protection state of libc.so.6
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of libc.so.6
2b212: 4b25 ldr r3, [pc, #148] ; (2b2a8 <__uselocale@@GLIBC_2.4+0x27c>)
2b214: 2000 movs r0, #0
2b216: 9907 ldr r1, [sp, #28]
2b218: f04f 32ff mov.w r2, #4294967295 ; 0xffffffff
2b21c: 58e4 ldr r4, [r4, r3]
2b21e: 2322 movs r3, #34 ; 0x22
2b220: e9cd 2000 strd r2, r0, [sp]
2b224: 2203 movs r2, #3
2b226: 6924 ldr r4, [r4, #16]
2b228: 4421 add r1, r4
2b22a: 4264 negs r4, r4
2b22c: 4021 ands r1, r4
2b22e: 9107 str r1, [sp, #28]
2b230: f07e feaa bl a9f88 <__mmap@@GLIBC_PRIVATE>
2b234: 1c43 adds r3, r0, #1
2b236: 4604 mov r4, r0
2b238: d013 beq.n 2b262 <__uselocale@@GLIBC_2.4+0x236>
2b23a: 9b07 ldr r3, [sp, #28]
2b23c: 9906 ldr r1, [sp, #24]
2b23e: f840 3b04 str.w r3, [r0], #4
2b242: f03f f91d bl 6a480 <strcpy@@GLIBC_2.4>
2b246: 4b19 ldr r3, [pc, #100] ; (2b2ac <__uselocale@@GLIBC_2.4+0x280>)
2b248: 447b add r3, pc
--
2c5c8: 4410 add r0, r2
2c5ca: 4430 add r0, r6
2c5cc: f7f4 eec2 blx 21354 <alloc@plt+0x4>
2c5d0: 6b7b ldr r3, [r7, #52] ; 0x34
2c5d2: 4604 mov r4, r0
2c5d4: 2800 cmp r0, #0
2c5d6: d0af beq.n 2c538 <gettext@@GLIBC_2.4+0xbb0>
2c5d8: 4632 mov r2, r6
2c5da: 4651 mov r1, sl
2c5dc: 301c adds r0, #28
2c5de: 3501 adds r5, #1
2c5e0: f043 ea4e blx 6fa80 <emcpy@@GLIBC_2.4>
2c5e4: 4406 add r6, r0
2c5e6: 462a mov r2, r5
2c5e8: 4649 mov r1, r9
2c5ea: 1975 adds r5, r6, r5
2c5ec: 4630 mov r0, r6
2c5ee: f043 ea48 blx 6fa80 <emcpy@@GLIBC_2.4>
2c5f2: 4641 mov r1, r8
2c5f4: 4628 mov r0, r5
2c5f6: f03d ff43 bl 6a480 <strcpy@@GLIBC_2.4>
2c5fa: f8d7 308c ldr.w r3, [r7, #140] ; 0x8c
2c5fe: 4a1b ldr r2, [pc, #108] ; (2c66c <gettext@@GLIBC_2.4+0xce4>)
--
38090: 5253 strh r3, [r2, r1]
38092: f44f 7300 mov.w r3, #512 ; 0x200
38096: 2200 movs r2, #0
38098: 4631 mov r1, r6
3809a: f067 fca9 bl 9f9f0 <faccessat@@GLIBC_2.4>
3809e: 2800 cmp r0, #0
380a0: d083 beq.n 37faa <__libc_system@@GLIBC_PRIVATE+0x2ba>
380a2: 1c7b adds r3, r7, #1
380a4: 2401 movs r4, #1
380a6: e73f b.n 37f28 <__libc_system@@GLIBC_PRIVATE+0x238>
380a8: 461f mov r7, r3
380aa: 2e00 cmp r6, #0
380ac: bf14 ite ne
380ae: 46a0 movne r8, r4
380b0: f044 0801 orreq.w r8, r4, #1
380b4: e66f b.n 37d96 <__libc_system@@GLIBC_PRIVATE+0xa6>
380b6: f8dd 8008 ldr.w r8, [sp, #8]
380ba: 4631 mov r1, r6
380bc: 461f mov r7, r3
380be: 4640 mov r0, r8
380c0: f032 f9de bl 6a480 <strcpy@@GLIBC_2.4>
380c4: 4606 mov r6, r0
380c6: 4580 cmp r8, r0
--
6a056: f069 fb5d bl d3714 <pmap_getport@GLIBC_2.4+0x34>
6a05a: f058 fd4b bl c2af4 <__res_iclose@@GLIBC_PRIVATE+0x78>
6a05e: ee1d 3f70 mrc 15, 0, r3, cr13, cr0, {3}
6a062: f5a3 64a8 sub.w r4, r3, #1344 ; 0x540
6a066: f853 0c08 ldr.w r0, [r3, #-8]
6a06a: f7b7 e934 blx 212d4 <free@plt+0x4>
6a06e: f8d4 053c ldr.w r0, [r4, #1340] ; 0x53c
6a072: f7b7 e930 blx 212d4 <free@plt+0x4>
6a076: f7f0 f91d bl 5a2b4 <dlvsym@GLIBC_2.4+0x6c>
6a07a: e8bd 4010 ldmia.w sp!, {r4, lr}
6a07e: f7fe bbc7 b.w 68810 <__default_morecore@GLIBC_2.4+0x1a90>
6a082: bf00 nop
0006a084 <strcat@@GLIBC_2.4>:
6a084: b538 push {r3, r4, r5, lr}
6a086: 4604 mov r4, r0
6a088: 460d mov r5, r1
6a08a: f000 fc19 bl 6a8c0 <strlen@@GLIBC_2.4>
6a08e: 4629 mov r1, r5
6a090: 4420 add r0, r4
6a092: f000 f9f5 bl 6a480 <strcpy@@GLIBC_2.4>
6a096: 4620 mov r0, r4
6a098: bd38 pop {r3, r4, r5, pc}
--
a0648: d8c4 bhi.n a05d4 <getcwd@@GLIBC_2.4+0x4ac>
a064a: 0006 movs r6, r0
a064c: d8b4 bhi.n a05b8 <getcwd@@GLIBC_2.4+0x490>
a064e: 0006 movs r6, r0
a0650: d8a6 bhi.n a05a0 <getcwd@@GLIBC_2.4+0x478>
a0652: 0006 movs r6, r0
000a0654 <getwd@@GLIBC_2.4>:
a0654: b570 push {r4, r5, r6, lr}
a0656: 4605 mov r5, r0
a0658: f5ad 5d80 sub.w sp, sp, #4096 ; 0x1000
a065c: b180 cbz r0, a0680 <getwd@@GLIBC_2.4+0x2c>
a065e: 466e mov r6, sp
a0660: f44f 5180 mov.w r1, #4096 ; 0x1000
a0664: 4630 mov r0, r6
a0666: f7ff fd5f bl a0128 <getcwd@@GLIBC_2.4>
a066a: 4604 mov r4, r0
a066c: b1a0 cbz r0, a0698 <getwd@@GLIBC_2.4+0x44>
a066e: 4631 mov r1, r6
a0670: 4628 mov r0, r5
a0672: f7c9 ff05 bl 6a480 <strcpy@@GLIBC_2.4>
a0676: 4604 mov r4, r0
a0678: 4620 mov r0, r4
--
ae162: 2300 movne r3, #0
ae164: 4293 cmp r3, r2
ae166: bf0b itete eq
ae168: 4641 moveq r1, r8
ae16a: 4639 movne r1, r7
ae16c: f04f 0902 moveq.w r9, #2
ae170: f04f 0905 movne.w r9, #5
ae174: f7ff ff74 bl ae060 <__socket@@GLIBC_PRIVATE>
ae178: 1c43 adds r3, r0, #1
ae17a: d11f bne.n ae1bc <isfdtype@@GLIBC_2.4+0x124>
ae17c: 3414 adds r4, #20
ae17e: 42ac cmp r4, r5
ae180: d010 beq.n ae1a4 <isfdtype@@GLIBC_2.4+0x10c>
ae182: 1c72 adds r2, r6, #1
ae184: d0e2 beq.n ae14c <isfdtype@@GLIBC_2.4+0xb4>
ae186: 7823 ldrb r3, [r4, #0]
ae188: 2b00 cmp r3, #0
ae18a: d0df beq.n ae14c <isfdtype@@GLIBC_2.4+0xb4>
ae18c: 4621 mov r1, r4
ae18e: f10d 0006 add.w r0, sp, #6
ae192: f7bc f975 bl 6a480 <strcpy@@GLIBC_2.4>
ae196: 2104 movs r1, #4
ae198: 4650 mov r0, sl
--
bab16: 6825 ldr r5, [r4, #0]
bab18: 47a8 blx r5
bab1a: 2200 movs r2, #0
bab1c: 4683 mov fp, r0
bab1e: e9cd 0200 strd r0, r2, [sp]
bab22: 4623 mov r3, r4
bab24: 4631 mov r1, r6
bab26: 4638 mov r0, r7
bab28: f00d f8d2 bl c7cd0 <__nss_next2@@GLIBC_PRIVATE>
bab2c: 2800 cmp r0, #0
bab2e: d0e8 beq.n bab02 <ether_ntohost@@GLIBC_2.4+0x32>
bab30: f1bb 0f01 cmp.w fp, #1
bab34: d007 beq.n bab46 <ether_ntohost@@GLIBC_2.4+0x76>
bab36: f04f 33ff mov.w r3, #4294967295 ; 0xffffffff
bab3a: 9304 str r3, [sp, #16]
bab3c: 9804 ldr r0, [sp, #16]
bab3e: f20d 4d34 addw sp, sp, #1076 ; 0x434
bab42: e8bd 8ff0 ldmia.w sp!, {r4, r5, r6, r7, r8, r9, sl, fp, pc}
bab46: f8d8 1000 ldr.w r1, [r8]
bab4a: 9805 ldr r0, [sp, #20]
bab4c: f7af fc98 bl 6a480 <strcpy@@GLIBC_2.4>
bab50: 9804 ldr r0, [sp, #16]
bab52: f20d 4d34 addw sp, sp, #1076 ; 0x434
--
c1d42: 447b add r3, pc
c1d44: 681b ldr r3, [r3, #0]
c1d46: 50d1 str r1, [r2, r3]
c1d48: b01f add sp, #124 ; 0x7c
c1d4a: e8bd 8ff0 ldmia.w sp!, {r4, r5, r6, r7, r8, r9, sl, fp, pc}
c1d4e: 78ca ldrb r2, [r1, #3]
c1d50: ac12 add r4, sp, #72 ; 0x48
c1d52: 788b ldrb r3, [r1, #2]
c1d54: 4620 mov r0, r4
c1d56: e9cd 3200 strd r3, r2, [sp]
c1d5a: 784b ldrb r3, [r1, #1]
c1d5c: 780a ldrb r2, [r1, #0]
c1d5e: 497d ldr r1, [pc, #500] ; (c1f54 <inet_ntop@@GLIBC_2.4+0x230>)
c1d60: 4479 add r1, pc
c1d62: f77d f89b bl 3ee9c <_IO_sprintf@@GLIBC_2.4>
c1d66: 9b03 ldr r3, [sp, #12]
c1d68: 4283 cmp r3, r0
c1d6a: f240 80d1 bls.w c1f10 <inet_ntop@@GLIBC_2.4+0x1ec>
c1d6e: 9804 ldr r0, [sp, #16]
c1d70: 4621 mov r1, r4
c1d72: f7a8 fb85 bl 6a480 <strcpy@@GLIBC_2.4>
c1d76: b01f add sp, #124 ; 0x7c
c1d78: e8bd 8ff0 ldmia.w sp!, {r4, r5, r6, r7, r8, r9, sl, fp, pc}
--
c1e68: 4404 add r4, r0
c1e6a: 3501 adds r5, #1
c1e6c: f109 0904 add.w r9, r9, #4
c1e70: 2d08 cmp r5, #8
c1e72: d1e4 bne.n c1e3e <inet_ntop@@GLIBC_2.4+0x11a>
c1e74: 1c73 adds r3, r6, #1
c1e76: d005 beq.n c1e84 <inet_ntop@@GLIBC_2.4+0x160>
c1e78: 4446 add r6, r8
c1e7a: 2e08 cmp r6, #8
c1e7c: bf04 itt eq
c1e7e: 233a moveq r3, #58 ; 0x3a
c1e80: f804 3b01 strbeq.w r3, [r4], #1
c1e84: 9b05 ldr r3, [sp, #20]
c1e86: 2000 movs r0, #0
c1e88: f804 0b01 strb.w r0, [r4], #1
c1e8c: 1ae4 subs r4, r4, r3
c1e8e: 9b03 ldr r3, [sp, #12]
c1e90: 42a3 cmp r3, r4
c1e92: d346 bcc.n c1f22 <inet_ntop@@GLIBC_2.4+0x1fe>
c1e94: e9dd 0104 ldrd r0, r1, [sp, #16]
c1e98: f7a8 faf2 bl 6a480 <strcpy@@GLIBC_2.4>
c1e9c: b01f add sp, #124 ; 0x7c
c1e9e: e8bd 8ff0 ldmia.w sp!, {r4, r5, r6, r7, r8, r9, sl, fp, pc}
--
c82c4: f485 5580 eor.w r5, r5, #4096 ; 0x1000
c82c8: bf14 ite ne
c82ca: 2401 movne r4, #1
c82cc: 2400 moveq r4, #0
c82ce: ea14 3415 ands.w r4, r4, r5, lsr #12
c82d2: d12c bne.n c832e <__nss_lookup_function@@GLIBC_PRIVATE+0x5ba>
c82d4: f811 4f01 ldrb.w r4, [r1, #1]!
c82d8: 2c00 cmp r4, #0
c82da: d1ee bne.n c82ba <__nss_lookup_function@@GLIBC_PRIVATE+0x546>
c82dc: f811 3c01 ldrb.w r3, [r1, #-1]
c82e0: 2b2e cmp r3, #46 ; 0x2e
c82e2: d024 beq.n c832e <__nss_lookup_function@@GLIBC_PRIVATE+0x5ba>
c82e4: 464a mov r2, r9
c82e6: 4631 mov r1, r6
c82e8: 200a movs r0, #10
c82ea: f7f9 ff3d bl c2168 <inet_pton@@GLIBC_2.4>
c82ee: 2800 cmp r0, #0
c82f0: ddbb ble.n c826a <__nss_lookup_function@@GLIBC_PRIVATE+0x4f6>
c82f2: 4631 mov r1, r6
c82f4: 4658 mov r0, fp
c82f6: f7a2 f8c3 bl 6a480 <strcpy@@GLIBC_2.4>
c82fa: 2300 movs r3, #0
c82fc: 220a movs r2, #10
--
c836a: 9b11 ldr r3, [sp, #68] ; 0x44
c836c: b11b cbz r3, c8376 <__nss_lookup_function@@GLIBC_PRIVATE+0x602>
c836e: 9a11 ldr r2, [sp, #68] ; 0x44
c8370: f04f 33ff mov.w r3, #4294967295 ; 0xffffffff
c8374: 6013 str r3, [r2, #0]
c8376: 4b28 ldr r3, [pc, #160] ; (c8418 <__nss_lookup_function@@GLIBC_PRIVATE+0x6a4>)
c8378: ee1d 2f70 mrc 15, 0, r2, cr13, cr0, {3}
c837c: 2122 movs r1, #34 ; 0x22
c837e: 2001 movs r0, #1
c8380: 447b add r3, pc
c8382: 681b ldr r3, [r3, #0]
c8384: 50d1 str r1, [r2, r3]
c8386: e7d3 b.n c8330 <__nss_lookup_function@@GLIBC_PRIVATE+0x5bc>
c8388: 4649 mov r1, r9
c838a: 4630 mov r0, r6
c838c: f7f9 fca0 bl c1cd0 <__inet_aton_exact@@GLIBC_PRIVATE>
c8390: 2800 cmp r0, #0
c8392: f43f af6a beq.w c826a <__nss_lookup_function@@GLIBC_PRIVATE+0x4f6>
c8396: 4631 mov r1, r6
c8398: 4658 mov r0, fp
c839a: f7a2 f871 bl 6a480 <strcpy@@GLIBC_2.4>
c839e: 9a00 ldr r2, [sp, #0]
c83a0: 2300 movs r3, #0
--
d9a08: b143 cbz r3, d9a1c <openpty@@GLIBC_2.34+0x94>
d9a0a: f50d 5381 add.w r3, sp, #4128 ; 0x1020
d9a0e: f245 4114 movw r1, #21524 ; 0x5414
d9a12: 4648 mov r0, r9
d9a14: 699a ldr r2, [r3, #24]
d9a16: 3318 adds r3, #24
d9a18: f7cd fc32 bl a7280 <__ioctl_time64@@GLIBC_2.34>
d9a1c: 9b01 ldr r3, [sp, #4]
d9a1e: f8ca 4000 str.w r4, [sl]
d9a22: f8c3 9000 str.w r9, [r3]
d9a26: b16f cbz r7, d9a44 <openpty@@GLIBC_2.34+0xbc>
d9a28: f89b 2000 ldrb.w r2, [fp]
d9a2c: b932 cbnz r2, d9a3c <openpty@@GLIBC_2.34+0xb4>
d9a2e: 1f29 subs r1, r5, #4
d9a30: 4620 mov r0, r4
d9a32: f7ff ff67 bl d9904 <logwtmp@@GLIBC_2.34+0x84>
d9a36: b980 cbnz r0, d9a5a <openpty@@GLIBC_2.34+0xd2>
d9a38: f855 bc04 ldr.w fp, [r5, #-4]
d9a3c: 4659 mov r1, fp
d9a3e: 4638 mov r0, r7
d9a40: f790 fd1e bl 6a480 <strcpy@@GLIBC_2.4>
d9a44: 45ab cmp fp, r5
d9a46: d0ba beq.n d99be <openpty@@GLIBC_2.34+0x36>
[*] Function strcpy used 12 times libc.so.6