[*] Binary protection state of se.so
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of se.so
ldr r7, [0x00003080]
movs r3, 6
str.w r3, [r4, 0x200]
mov r6, r5
add r7, pc
ldm r7!, {r0, r1, r2, r3}
str r0, [r4]
str r1, [r4, 4]
str r2, [r4, 8]
str r3, [r4, 0xc]
b 0x2f7a
cmp r4, 0
beq 0x2f7a
movs r2, 9
mov r3, r8
str.w r2, [r4, 0x200]
mov r0, r4
ldr r2, [0x00003084]
mov.w r1, 0x200
add r2, pc
blx sym.imp.__sprintf_chk
b 0x2f7a
blx 0x1e9c
--
ldr r7, [0x00003278]
movs r3, 6
str.w r3, [r4, 0x200]
mov r6, r5
add r7, pc
ldm r7!, {r0, r1, r2, r3}
str r0, [r4]
str r1, [r4, 4]
str r2, [r4, 8]
str r3, [r4, 0xc]
b 0x3170
cmp r4, 0
beq 0x3170
movs r2, 9
mov r3, r8
str.w r2, [r4, 0x200]
mov r0, r4
ldr r2, [0x0000327c]
mov.w r1, 0x200
add r2, pc
blx sym.imp.__sprintf_chk
b 0x3170
blx 0x1e9c
--
ldr r2, [sp, 0x178]
strd r7, r6, [sp]
str r4, [sp, 8]
blx sym.imp.se_compute_key
mov fp, r0
cbz r0, 0x3602
ldr r2, [r7]
ldr r3, [r6]
str.w r2, [sl]
str.w r3, [sb]
b 0x356e
cmp r5, 0
beq 0x356a
ldr r2, [0x0000363c]
movs r1, 9
str.w r1, [r5, 0x200]
mov r3, r4
mov r0, r5
mov.w r1, 0x200
add r2, pc
blx sym.imp.__sprintf_chk
b 0x356e
blx 0x1e9c
--
str r4, [sp, 0xc]
blx sym.imp.se_pubkey_get
mov r5, r0
cbz r0, 0x376e
ldr r2, [sp, 0x14]
ldr.w r3, [r8]
str.w fp, [r2]
mov.w fp, 0
ldr r2, [sp, 0x18]
str r3, [r2]
b 0x36bc
cmp r6, 0
beq 0x36bc
movs r2, 9
mov r3, r4
str.w r2, [r6, 0x200]
mov r1, sb
ldr r2, [0x000037c0]
mov r0, r6
add r2, pc
blx sym.imp.__sprintf_chk
b 0x36bc
blx 0x1e9c
--
blx sym.imp.__cxa_finalize
mov r4, r0
cbz r0, 0x38f4
ldr.w r3, [r8]
mov r5, sl
ldr r2, [sp, 0x14]
str r3, [r2]
ldr r3, [r6]
ldr r2, [sp, 0x18]
str r3, [r2]
b 0x384a
cmp r5, 0
beq 0x3846
movs r2, 9
mov r3, r7
str.w r2, [r5, 0x200]
mov r0, r5
ldr r2, [0x0000392c]
mov.w r1, 0x200
add r2, pc
blx sym.imp.__sprintf_chk
b 0x3846
blx 0x1e9c
--
cmp r5, 0
beq.w 0x3b1a
ldr r1, [0x00003dd0]
movs r0, 9
str.w r0, [r5, 0x200]
mov.w r3, 0x200
mov r0, r5
mov r5, r2
add r1, pc
strd fp, sb, [sp, 4]
str r1, [sp]
movs r2, 1
mov r1, r3
blx 0x1e04
ldr r0, [r7]
mov sb, r5
blx 0x1cc0
ldr.w r0, [r8]
blx 0x1cc0
mov r0, sb
blx sym.imp.snprintf
mov r0, r5
blx sym.imp.se_secure_object_read
--
str.w r3, [r5, 0x200]
blx sym.imp.ERR_get_error
mov r1, r6
blx 0x1de0
ldr r3, [sp, 0x14]
movs r2, 1
str r0, [sp, 8]
mov r0, r5
str r3, [sp, 4]
ldr r3, [0x00003df8]
add r3, pc
str r3, [sp]
mov.w r3, 0x200
mov r1, r3
blx 0x1e04
ldr r0, [r7]
blx 0x1cc0
ldr.w r0, [r8]
blx 0x1cc0
mov r0, sb
blx sym.imp.snprintf
mov r0, sl
blx sym.imp.se_secure_object_read
--
mov r1, r8
mov r0, sl
str r3, [sp, 0x14]
blx 0x1c50
ldr r3, [sp, 0x14]
mov r2, r0
cmp r0, 0
bne 0x3fcc
ldr.w r1, [r3, 0x200]
cmp r1, 7
beq.w 0x4048
cmp r4, 0
beq.w 0x3ff6
str.w r1, [r4, 0x200]
mov r0, r4
mov r4, r2
ldr r2, [0x0000415c]
mov r5, r4
mov.w r1, 0x200
add r2, pc
blx sym.imp.__sprintf_chk
ldr.w ip, [r8]
mov r0, ip
--
cmp sb, r4
add r3, sl
bne 0x43dc
ldr r3, [sp, 0x10]
mov r4, r6
ldr r2, [sp, 0x1c]
mov sb, r8
str r2, [r3]
ldrd r3, r2, [sp, 0x14]
str r2, [r3]
b 0x4224
cmp r4, 0
beq 0x4340
movs r2, 9
mov r3, r5
str.w r2, [r4, 0x200]
mov r0, r4
ldr r2, [0x000044cc]
mov.w r1, 0x200
add r2, pc
blx sym.imp.__sprintf_chk
b 0x4340
cbz r4, 0x449a
--
mov r0, r5
add sp, 0x13c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
mov fp, r0
mov r7, r1
blx 0x1b90
mov r0, fp
mov.w r1, -1
blx 0x1dbc
mov r5, r0
cmp r0, 0
beq.w 0x4d4c
mov r3, sb
mov r2, sb
mov r1, sb
blx 0x1d5c
mov fp, r0
cmp r0, 0
beq.w 0x4ba2
mov r0, r5
blx sym.imp.snprintf
mov r0, fp
ldr.w r8, [r8, 0x18]
--
str r2, [r6, 8]
b 0x4a42
cmp r4, 0
beq.w 0x4ce4
movs r3, 6
str.w r3, [r4, 0x200]
blx sym.imp.ERR_get_error
mov r1, fp
blx 0x1de0
ldr r3, [0x00004e90]
movs r2, 1
str r0, [sp, 4]
mov r0, r4
mov r4, fp
add r3, pc
str r3, [sp]
mov.w r3, 0x200
mov r1, r3
blx 0x1e04
mov r0, r5
blx sym.imp.snprintf
b 0x4cc2
ldr r3, [0x00004e94]
--
str r3, [r4, 0xc]
ldr r0, [r5]
ldrb r3, [r5, 4]
str r1, [r4, 4]
str r2, [r4, 8]
str r0, [r4, 0x10]
strb r3, [r4, 0x14]
movs r4, 0
mov r5, sb
mov.w r8, 0
ldr.w r0, [sl]
blx 0x1cc0
mov r0, r8
blx 0x1cc0
mov r0, r4
blx 0x1cc0
mov r0, fp
blx sym.imp.PKCS7_free
b 0x4a42
mov r0, r5
blx sym.imp.snprintf
b 0x4cc2
ldr r3, [0x00004ea8]
--
blx 0x1ca4
b 0x4cc8
cbz r4, 0x4db6
movs r3, 9
mov fp, sb
str.w r3, [r4, 0x200]
blx sym.imp.ERR_get_error
mov r1, sb
blx 0x1de0
ldr r3, [0x00004eb4]
mov r2, r0
mov r0, r4
mov r4, sb
add r3, pc
strd r3, r2, [sp]
mov.w r3, 0x200
movs r2, 1
mov r1, r3
blx 0x1e04
mov r0, sb
blx sym.imp.snprintf
b 0x4cc2
ldr r1, [sp, 0x10]
--
cmp r2, 2
ite eq
moveq r2, 4
movne r2, 9
cmp r4, 0
beq 0x4cc2
str.w r2, [r4, 0x200]
mov r0, r4
ldr r2, [0x00004eb8]
mov r4, r3
mov.w r3, 0x200
str r1, [sp, 4]
mov r1, r3
mov sb, r4
add r2, pc
str r2, [sp]
movs r2, 1
blx 0x1e04
b 0x4cc2
mov fp, r4
blx sym.imp.snprintf
b 0x4cc2
cmp r4, 0
--
movs r2, 1
mov r1, r3
blx 0x1e04
b 0x4fce
add.w r8, sp, 0x10
ldr r1, [r5]
ldr r0, [r7, 4]
mov r2, r8
blx 0x1ccc
mov r6, r0
cbnz r0, 0x50a6
cmp r4, 0
beq 0x4fcc
ldr r2, [0x000050dc]
movs r1, 9
str.w r1, [r4, 0x200]
mov r3, r8
mov r0, r4
mov.w r1, 0x200
add r2, pc
blx sym.imp.__sprintf_chk
b 0x4fce
ldr r1, [r5]
[*] Function printf used 15 times se.so
