[*] Binary protection state of ubinize
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of ubinize
ldr r3, [r6, 0x1c]
cmp r3, 0
itt gt
movgt r4, r0
movgt r5, 0
ble 0x25d8
mov r1, r4
movs r2, 0xa8
mov.w r0, -1
adds r5, 1
bl 0x30c0
ldr r2, [r6, 0x1c]
rev r0, r0
str.w r0, [r4, 0xa8]
adds r4, 0xac
cmp r2, r5
bgt 0x25bc
mov r0, r7
add sp, 0x14
pop {r4, r5, r6, r7, pc}
blx sym.imp.__sprintf_chk
ldr r3, [0x00002620]
movs r1, 1
--
mov r1, r5
strh r3, [r5, 0xe]
bl 0x30c0
rev r0, r0
str.w r0, [r5, 0xa8]
mov r0, r4
add sp, 8
pop.w {r4, r5, r6, r7, r8, pc}
ldr r4, [0x00002714]
ldr r3, [0x00002718]
ldr r4, [r1, r4]
str r2, [sp, 4]
add r3, pc
ldr r2, [0x0000271c]
add r2, pc
movs r1, 1
str r0, [sp]
ldr r0, [r4]
mov.w r4, -1
blx 0xcf0
blx sym.imp.__sprintf_chk
movs r3, 0x16
str r3, [r0]
--
mov r3, r5
ldr r0, [sp, 0x50]
sbcs.w r2, r8, ip
mov r1, sb
ittt lt
asrlt ip, r4, 0x1f
movlt r5, r4
mov r3, r4
subs r3, r4, r3
mov r2, r5
mov r4, r3
sbc.w r8, r8, ip
blx 0xb58
mov r2, r0
mov r3, fp
cmp r5, r2
mov r1, sl
mov r0, r6
add.w fp, fp, 1
beq 0x286c
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x1c]
movs r1, 1
--
str r4, [sp, 4]
str r3, [sp]
add r2, pc
movs r3, 0xb
blx 0xcf0
mov r0, r7
blx 0xb68
mov r0, sb
blx 0xb68
mov.w r0, -1
add sp, 0x24
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
mov r0, r7
blx 0xb68
mov r0, sb
blx 0xb68
movs r0, 0
add sp, 0x24
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
str r3, [sp, 0x14]
blx sym.imp.__sprintf_chk
ldr r3, [sp, 0x1c]
movs r1, 1
--
mov r0, r5
add r3, pc
str r4, [sp, 4]
str r3, [sp]
add r2, pc
movs r3, 0xb
blx 0xcf0
b 0x2922
ldr r2, [0x00002a5c]
ldr r1, [sp, 0x1c]
ldr r3, [0x00002a80]
ldr r4, [r1, r2]
ldr r2, [0x00002a84]
add r3, pc
str r7, [sp, 4]
add r2, pc
movs r1, 1
str r0, [sp]
ldr r0, [r4]
blx 0xcf0
blx sym.imp.__sprintf_chk
movs r2, 0x16
mov r3, r0
str r2, [r3]
mov.w r0, -1
b 0x2932
ldr r1, [0x00002a5c]
ldr r4, [sp, 0x1c]
ldr r3, [0x00002a88]
ldr r4, [r4, r1]
str r2, [sp, 4]
add r3, pc
ldr r2, [0x00002a8c]
add r2, pc
b 0x29a0
blx sym.imp.__sprintf_chk
ldr r1, [sp, 0x1c]
ldr r2, [0x00002a5c]
--
ldr r0, [r4]
add r2, pc
blx 0xcf0
ldr r6, [r4]
mov r0, r5
ldr r4, [0x00002a98]
blx sym.imp.__ctype_tolower_loc
ldr r2, [0x00002a9c]
mov r1, r0
add r4, pc
strd r5, r1, [sp, 4]
movs r3, 0xb
mov r0, r6
add r2, pc
movs r1, 1
str r4, [sp]
blx 0xcf0
mov.w r0, -1
b 0x2932
str r2, [sp, 0x14]
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x1c]
movs r1, 1
--
mov r0, sl
mov r1, r5
blx 0xce4
ldr r4, [r4, 4]
cmp r4, r0
bne 0x2cc6
mov r0, r5
blx 0xb68
mov r0, r6
ldr r2, [0x00002d60]
ldr r3, [0x00002d54]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x54]
eors r2, r3
mov.w r3, 0
bne.w 0x2d4c
add sp, 0x5c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x14]
mov r1, fp
--
add r2, pc
blx 0xcf0
mov r0, r4
ldr r6, [r6]
blx sym.imp.__ctype_tolower_loc
ldr r3, [0x00002d70]
mov r1, fp
ldr r2, [0x00002d74]
str r0, [sp, 8]
mov r0, r6
add r3, pc
strd r3, r4, [sp]
add r2, pc
movs r3, 0xb
blx 0xcf0
mov r0, r5
blx 0xb68
mov.w r0, -1
b 0x2be0
str r3, [sp, 0x10]
blx sym.imp.__sprintf_chk
ldr r3, [sp, 0x14]
mov r1, fp
--
str r3, [sp]
ldr r3, [0x00002d7c]
add r2, pc
ldr r0, [r6]
add r3, pc
blx 0xcf0
mov r0, r4
ldr r6, [r6]
blx sym.imp.__ctype_tolower_loc
ldr r3, [0x00002d80]
mov r1, fp
ldr r2, [0x00002d84]
str r0, [sp, 8]
mov r0, r6
add r3, pc
strd r3, r4, [sp]
add r2, pc
movs r3, 0xb
blx 0xcf0
b 0x2c38
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x14]
mov r1, fp
--
ldr r3, [0x00002d88]
ldr r2, [0x00002d8c]
ldr r0, [r6]
add r3, pc
add r2, pc
blx 0xcf0
mov r0, r4
ldr r6, [r6]
blx sym.imp.__ctype_tolower_loc
ldr r3, [0x00002d90]
mov r1, fp
ldr r2, [0x00002d94]
str r0, [sp, 8]
mov r0, r6
add r3, pc
strd r3, r4, [sp]
add r2, pc
movs r3, 0xb
blx 0xcf0
b 0x2c38
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x14]
mov r1, fp
--
ldr r2, [0x00002d9c]
str r4, [sp]
add r3, pc
ldr r0, [r7]
add r2, pc
blx 0xcf0
mov r0, r6
ldr r4, [r7]
blx sym.imp.__ctype_tolower_loc
ldr r3, [0x00002da0]
mov r1, fp
ldr r2, [0x00002da4]
str r0, [sp, 8]
mov r0, r4
add r3, pc
strd r3, r6, [sp]
add r2, pc
movs r3, 0xb
blx 0xcf0
b 0x2c38
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x14]
mov r1, fp
[*] Function printf used 12 times ubinize
