[*] Binary protection state of ld-linux-armhf.so.3
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of ld-linux-armhf.so.3
add r0, pc
str r3, [sp, 0x24]
bl 0xc1f0
ldr r3, [sp, 0x24]
b 0x79f8
ldr r0, [0x00007abc]
ldr r2, [r4, 0x18]
ldr r1, [r4, 4]
add r0, pc
str r3, [sp, 0x24]
bl 0xc1f0
ldr r3, [sp, 0x24]
b 0x787a
ldr r3, [0x00007ac0]
ldr r0, [sp, 0x34]
add r3, pc
ldr r3, [r3]
blx r3
ldr r0, [0x00007ac4]
add r0, pc
bl sym._dl_fatal_printf
nop
ldr r7, [0x00007a64]
--
movne r1, 8
bl 0x16608
ldr r3, [0x0000a6c8]
mov r1, r0
movs r0, 0x18
add r3, pc
ldr r3, [r3]
blx r3
str.w r0, [fp, 0x1a8]
cmp r0, 0
bne.w 0x9218
ldr r3, [0x0000a6cc]
add r3, pc
ldr r3, [r3]
ldr r1, [r3]
cmp r1, 0
beq.w 0xa652
ldr r0, [0x0000a6d0]
ldr.w r2, [fp, 4]
add r0, pc
bl sym._dl_fatal_printf
ldr.w r2, [fp, 0x224]
cmp r2, r3
--
ldr r4, [0x0000ced4]
add r4, pc
b 0xcc64
cmp.w r5, 0x1000000
itete lo
ldrlo r1, [r7, 0x14]
lsrhs r1, r4, 9
lsllo r0, r5, 8
movhs r0, r5
bl 0x16608
mov r1, r0
mov.w r0, 0x1000000
bl 0x16608
mov r3, r0
b 0xcd90
ldr r1, [r7, 0x24]
mov r0, sb
bl 0x14ae0
ldr r0, [0x0000ced8]
add r0, pc
bl sym._dl_fatal_printf
movs r0, 0x60
str r3, [r5, 0x10]
--
blx r2
ldrd r3, r0, [r7]
movs r1, 0
add r0, r4
add.w r2, r6, r3, lsl 3
str r1, [r2, 4]
str.w r4, [r6, r3, lsl 3]
b 0xd220
blx r2
b 0xd1ba
ldr r3, [0x0000d2ec]
movw r2, 0x382
ldr r1, [0x0000d2f0]
ldr r0, [0x0000d2f4]
add r3, pc
add r1, pc
add r0, pc
bl 0x11f30
ldr r0, [0x0000d2f8]
add r0, pc
bl sym._dl_fatal_printf
nop
stc2 p0, c0, [r4, -4]
--
movs r1, 0
adds r0, r4, r7
blx 0x15da0
add.w r0, r4, 8
pop {r3, r4, r5, r6, r7, pc}
ldr r3, [0x0000d36c]
mov r0, r1
add r3, pc
ldr r3, [r3]
blx r3
mov r4, r0
cbz r0, 0xd35c
sub.w r1, r7, 8
adds r7, r6, 2
lsls r7, r7, 3
mov r2, r7
blx 0x15f40
b 0xd32a
ldr r0, [0x0000d370]
add r0, pc
bl sym._dl_fatal_printf
stc2 p0, c0, [r4, -4]
smlal r0, r0, r8, r1
--
rsb.w r2, r3, 0x10
cmp r2, r5
blo 0xd3c8
add r3, r5
ldr r0, [0x0000d3d4]
subs r2, r3, 1
ldr r4, [0x0000d3d8]
add r3, r2
add.w r3, r3, r3, lsl 3
add r0, pc
str.w r1, [r0, 0x890]
add r4, pc
add.w r1, r1, r3, lsl 4
adds r1, 0x90
str.w r1, [r4, 0x178]
add sp, 8
pop {r4, r5, r6, pc}
ldr r0, [0x0000d3dc]
mov r1, r5
add r0, pc
bl sym._dl_fatal_printf
nop
mrrc2 p0, 0, r0, sl, c1
--
bl 0xbdf0
ldr r3, [r0, 0xc]
cmp r3, 0
beq.w 0xe8b8
ldr r3, [0x0000ed4c]
movw r2, 0x241
ldr r1, [0x0000ed50]
ldr r0, [0x0000ed54]
add r3, pc
add r1, pc
add r0, pc
bl 0x11f30
mov r3, sl
mov.w sb, 4
b 0xe854
cmp r7, 0
beq.w 0xe87e
b 0xead6
ldr r0, [0x0000ed58]
add r0, pc
bl sym._dl_fatal_printf
mov r0, r4
bl 0xe188
--
ldr.w r3, [r8]
cbz r3, 0xf87c
ldr r2, [r7, 0x5c]
movs r1, 0
cmp r6, r2
ite ne
movne r0, r5
moveq r0, sb
blx r3
ldr.w r3, [sl, 0x1dc]
adds r4, 1
ldr.w r8, [r8, 0x20]
add.w sb, sb, 8
adds r5, 8
cmp r3, r4
bhi 0xf868
ldr.w sl, [r7, 0x58]
b 0xf65e
ldr r0, [0x0000fae0]
add r0, pc
bl sym._dl_fatal_printf
movs r2, 0
str r2, [r3]
--
b 0x10180
movs r3, r0
ldm.w ip, {r3, r6, sp}
b 0x10188
adds r0, 0
b 0x1018c
invalid
movs r7, r1
ldm.w r7, {r0, r1, r2, ip, lr, pc}
b 0xffca
strb r4, [r1, 4]
b 0xf7c8
b 0xfd48
b 0xf7cc
udf 0x11
b 0x101b0
vrhadd.u16 d14, d14, d31
ldr r0, [0x0000fca4]
push {r3, lr}
add r0, pc
bl sym._dl_fatal_printf
nop
adr r7, 0x70
--
movs r1, 0
ldr r3, [0x0000ff70]
str.w r1, [sb, 8]
add r2, pc
add r3, pc
strd r2, r3, [sb]
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
add sp, 8
bx lr
ldr.w sl, [0x0000ff74]
movs r3, 1
movs r7, 2
str r3, [sp, 0xc]
add sl, pc
b 0xfd7c
mov r4, r6
b 0xfe16
ldr r0, [0x0000ff78]
add r0, pc
bl sym._dl_fatal_printf
bne sym._dl_exception_free
movs r1, r0
--
add r0, pc
bl 0x139d0
cmn.w r0, 0x1000
bhi.w 0x10e3a
ldr r3, [0x00011274]
movs r2, 2
add r3, pc
str.w r2, [r3, 0xa64]
b 0x10e3a
mov r7, r8
b 0x11046
ldr r1, [sp, 0x10]
movs r3, 1
b 0x1115e
mov r3, ip
b 0x11002
str r3, [sp, 0x18]
b 0x11184
ldr r0, [0x00011278]
add r0, pc
bl sym._dl_fatal_printf
ldr r3, [0x0001127c]
add r3, pc
--
ldrh r6, [r0, 0x12]
movs r0, r0
ldrh r2, [r0, 2]
movs r0, r0
strh r4, [r5, 0x3e]
movs r0, r0
strh r6, [r0, 0x3e]
movs r0, r0
strh r0, [r6, 0x3e]
movs r0, r0
strh r2, [r7, 0x3e]
movs r0, r0
strh r4, [r7, 0x3a]
movs r0, r0
strh r6, [r1, 0x3c]
movs r0, r0
mov r1, r0
ldr r0, [0x00011f24]
push {r3, lr}
add r0, pc
bl sym._dl_fatal_printf
ldr r6, [r4, 0x14]
movs r0, r0
movs r0, 0x7f
push {r3, lr}
bl 0x14c28
push {lr}
sub sp, 0xc
cbz r3, 0x11f46
ldr r4, [0x00011f50]
add r4, pc
str r0, [sp, 4]
ldr r0, [0x00011f54]
str r4, [sp]
add r0, pc
bl sym._dl_fatal_printf
ldr r3, [0x00011f58]
add r3, pc
--
add r5, sp, 0x10
movs r1, r0
push {r7, lr}
mov r5, r1
sub sp, 0x198
mov r6, r2
cbz r3, 0x12228
ldr r7, [0x00012230]
mov r4, r3
add r7, pc
mov.w r2, 0x190
add r1, sp, 8
bl 0x11e14
str r0, [sp, 4]
mov r3, r4
ldr r0, [0x00012234]
mov r2, r6
mov r1, r5
str r7, [sp]
add r0, pc
bl sym._dl_fatal_printf
ldr r4, [0x00012238]
add r4, pc
--
cbz r7, 0x1235a
cbz r4, 0x12362
ldrb r3, [r5]
cbnz r3, 0x12352
ldr.w r8, [0x0001236c]
add r8, pc
cbz r0, 0x1234a
mov.w r2, 0x400
add r1, sp, 0x10
bl 0x11e14
ldr r3, [0x00012370]
add r3, pc
strd r3, r0, [sp, 8]
mov r2, r4
ldr r0, [0x00012374]
mov r3, r5
mov r1, r7
str r6, [sp, 4]
str.w r8, [sp]
add r0, pc
bl sym._dl_fatal_printf
ldr r3, [0x00012378]
add r3, pc
[*] Function printf used 15 times ld-linux-armhf.so.3
