[*] Binary protection state of se051-mngr
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of se051-mngr
blx sym.imp.BIO_free
ldr r2, [0x000065a4]
ldr r3, [0x000065a0]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x24]
eors r2, r3
mov.w r3, 0
bne.w 0x6596
mov r0, r4
add sp, 0x2c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
blx 0x29b8
blx sym.imp.BIO_new
mov r7, r0
cmp r0, 0
beq 0x6324
mov.w r1, 0x100
blx sym.imp.DES_ede3_cbc_encrypt
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov r6, r0
--
mov r0, r7
str r1, [sp, 0x24]
add r6, sp, 0x24
blx sym.imp.ECDH_compute_key
mov r0, r5
blx 0x2a78
mov r2, r0
cmp.w sl, 0
beq.w 0x6c5e
mov r2, r4
movs r0, 0
mov r1, sl
add r4, sp, 0x20
add.w sl, sp, 0x64
str r0, [sp, 0x20]
mov r3, fp
mov r0, r5
str.w r8, [sp]
str r4, [sp, 8]
str.w sl, [sp, 4]
blx sym.imp.__sprintf_chk
cmp r0, 0
beq 0x6a84
--
sub.w r2, r3, 0x28
subs r3, 0x33
cmp r3, 2
it hi
cmphi r2, 1
bhi 0x76da
cmp r0, 0
beq 0x775e
mov.w sb, 0
mov.w r3, -1
movw r2, 0x1002
movs r1, 0x18
mov r0, r5
str.w sb, [sp]
blx sym.imp.RSA_pkey_ctx_ctrl
movs r3, 1
movs r2, 0xf8
mov.w r1, -1
mov r0, r5
strd sb, r4, [sp]
blx sym.imp.__asprintf_chk
cmp r0, 1
bne 0x7674
--
ldr r1, [r3, 8]
bl 0x65d4
ldr r3, [r4, 4]
ldr r3, [r3, 8]
sub.w r2, r3, 0x28
subs r3, 0x33
cmp r3, 2
it hi
cmphi r2, 1
bhi 0x77fc
mov.w r4, 0x5a5a5a5a
cmp r0, 0
beq 0x779a
movs r3, 0
str r0, [sp, 4]
str r3, [sp]
movs r2, 0xf8
movs r3, 1
mov.w r1, -1
mov r0, r5
blx sym.imp.__asprintf_chk
cmp r0, 1
bne 0x7794
--
beq 0x8b54
cmp r3, 0xb
bne 0x8a6e
movs r1, 0
movs r2, 0x3c
add r0, sp, 0x20
str r1, [sp, 0x1c]
blx sym.imp.ECDH_compute_key
ldr r2, [r4, 4]
movs r1, 0x40
add r4, sp, 0x18
str r1, [sp, 0x18]
mov r3, r5
mov r0, sb
ldr r1, [r2, 0x2c]
ldr r2, [r2, 0x18]
str r4, [sp, 8]
add r4, sp, 0x1c
str r7, [sp]
str r4, [sp, 4]
blx sym.imp.__sprintf_chk
cmp r0, 0
beq 0x8a6e
--
str r3, [sp, 0x18]
blx 0x29dc
cmp r0, 1
bne 0x8a6e
ldr r3, [sp, 0x18]
ldr.w r2, [r8]
cmp r2, r3
itt eq
moveq r1, r6
moveq r0, r5
bne 0x8a6e
b 0x8ada
ldr r1, [r4, 4]
add r4, sp, 0x14
mov r3, r5
mov r0, sb
ldr r2, [r1, 0x18]
ldr r1, [r1, 0x2c]
strd r6, r4, [sp, 4]
str r7, [sp]
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x14]
movs r3, 0
--
cmp r3, r1
bhi 0x1174a
mov.w r0, 0x5a5a5a5a
b 0x11750
nop
push.w {r4, r5, r6, r7, r8, sb, sl, lr}
mov r7, r2
ldr r2, [0x00011938]
mov r6, r3
sub sp, 0x20
movs r4, 0
ldr r3, [0x0001193c]
mov r5, r1
add r2, pc
mov sl, r0
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x1c]
mov.w r3, 0
strd r4, r4, [sp, 0x10]
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov sb, r0
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
cmp r6, r4
--
strb r0, [r5, 0xb]
movs r2, r0
adds r5, 0xd4
movs r1, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov sl, r2
ldr r2, [0x00011a58]
mov fp, r3
sub sp, 0x2c
mov r5, r1
ldr r3, [0x00011a5c]
mov r6, r0
add r2, pc
ldr.w sb, [sp, 0x50]
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x24]
mov.w r3, 0
movs r3, 0
strd r3, r3, [sp, 0x1c]
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov r7, r0
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
cmp.w sl, 0
[*] Function printf used 10 times se051-mngr
