[*] Binary protection state of scheduled
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of scheduled
movs r0, r0
b.w 0x4368
push.w {r4, r5, r6, r7, r8, sb, sl, lr}
sub sp, 0x10
ldr r6, [0x0000e350]
mov sb, r2
mov r8, r3
mov r5, r0
ldr.w sl, [0x0000e354]
add r6, pc
mov r1, r6
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
add sl, pc
blx 0x42b8
mov r7, r0
cbnz r0, 0xe24a
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
mov r2, r4
mov r1, r6
--
mov r6, r3
mov r7, r2
ldr.w sb, [0x0000edb0]
mov r5, r0
add r1, pc
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
add sb, pc
blx 0x42b8
str r0, [sp, 0x1c]
cbz r6, 0xeaa8
ldrb r3, [r6]
cmp r3, 0
bne.w 0xec52
ldr r3, [sp, 0x1c]
cmp r3, 0
bne.w 0xec08
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0xec66
--
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov r6, r1
ldr.w fp, [0x0000f17c]
sub sp, 0x54
mov r7, r2
mov r8, r3
ldr.w sl, [0x0000f180]
mov r5, r0
add fp, pc
mov r1, fp
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
add sl, pc
blx 0x42b8
str r0, [sp, 0x2c]
cmp r0, 0
bne.w 0xef78
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
mov r2, r4
mov r1, fp
--
mov r2, r4
add r1, pc
mov r0, r7
blx 0x3fa0
ldr r0, [r7, 0x30]
clz r0, r0
lsrs r0, r0, 5
ldr r2, [0x0000f3fc]
ldr r3, [0x0000f3d4]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x44]
eors r2, r3
mov.w r3, 0
bne 0xf3cc
add sp, 0x4c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r1, [r4, 4]
mov r0, r7
blx sym.imp.__sprintf_chk
mov r2, r4
mov r1, sb
--
mov r5, r0
ldr r0, [r0, 4]
blx 0x42b8
ldr r3, [sp, 0xc]
mov r7, r0
mov.w r2, 0x10c
movs r1, 1
mov r0, sb
str r6, [r3]
ldr r3, [0x0000f700]
str.w r8, [sp, 4]
add r3, pc
str r3, [sp]
ldr r3, [0x0000f704]
add r3, pc
blx sym.imp.schedule_set_id
cmp r7, 0
bne 0xf51e
ldr r1, [r5, 4]
mov r0, r4
blx sym.imp.__sprintf_chk
mov r2, r5
mov r3, r0
--
add r3, pc
str r3, [sp, 0x28]
ldr r3, [sp, 0x28]
add r7, sp, 0x58
mov.w r2, 0x10c
movs r1, 1
mov r0, r7
strd sb, fp, [sp, 8]
str r3, [sp, 4]
ldr.w r3, [0x0000fc2c]
add r3, pc
str r3, [sp]
ldr.w r3, [0x0000fc30]
add r3, pc
blx sym.imp.schedule_set_id
ldr r3, [sp, 0x24]
cmp r3, 0
bne 0xf8a0
ldr r1, [r6, 4]
mov r0, r4
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0xfa36
--
ldr r6, [0x000109a4]
add r2, pc
ldr.w sl, [0x000109a8]
ldr r3, [r2, r3]
add r6, pc
ldr.w fp, [sp, 0x48]
adds r6, 0x5c
add sl, pc
mov r1, r6
ldr r3, [r3]
str r3, [sp, 0x1c]
mov.w r3, 0
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
blx 0x42b8
mov r7, r0
cbnz r0, 0x1087e
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
cmp r0, 0
bne 0x10960
--
add fp, pc
ldr r3, [r3]
str r3, [sp, 0x3c]
mov.w r3, 0
ldr r3, [sp, 0x68]
str r3, [sp, 0x18]
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
blx 0x42b8
mov sb, r0
cmp.w sl, 0
beq 0x10f8c
ldrb.w r3, [sl]
cmp r3, 0
bne.w 0x11148
cmp.w sb, 0
bne.w 0x110e4
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0x1115c
--
add sb, pc
ldr r3, [r3]
str r3, [sp, 0x54]
mov.w r3, 0
ldr r3, [sp, 0x88]
mov r1, sl
str r3, [sp, 0x24]
ldrd r8, r3, [sp, 0x8c]
str r3, [sp, 0x28]
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
blx 0x42b8
vmov.i32 d16, 0
str r0, [sp, 0x2c]
vstr d16, [sp, 0x48]
cmp r0, 0
bne.w 0x1149c
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0x11504
--
mov r2, r4
add r1, pc
adds r1, 0x5c
blx 0x3fa0
ldr r0, [r7, 0x30]
clz r0, r0
lsrs r0, r0, 5
ldr r2, [0x00011970]
ldr r3, [0x00011948]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x3c]
eors r2, r3
mov.w r3, 0
bne 0x11940
add sp, 0x44
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r1, [r4, 4]
mov r0, r7
blx sym.imp.__sprintf_chk
cbnz r0, 0x1192c
add.w r1, r8, r8, lsl 2
--
mov r5, r0
ldr r0, [r0, 4]
blx 0x42b8
ldr r3, [0x00011c84]
mov r7, r0
str.w fp, [sl]
add.w sl, sp, 0x28
movw r2, 0x161
movs r1, 1
add r3, pc
mov r0, sl
str r3, [sp]
ldr r3, [0x00011c88]
str.w r8, [sp, 4]
add r3, pc
blx sym.imp.schedule_set_id
cmp r7, 0
bne 0x11a3a
ldr r1, [r5, 4]
mov r0, r4
blx sym.imp.__sprintf_chk
mov r3, r0
cmp r0, 0
--
add r3, pc
str r3, [sp, 0x24]
ldr r3, [sp, 0x24]
add r7, sp, 0x60
movw r2, 0x161
movs r1, 1
mov r0, r7
strd sb, r3, [sp, 8]
ldr r3, [sp, 0x28]
str r3, [sp, 4]
ldr.w r3, [0x000121a4]
add r3, pc
str r3, [sp]
ldr.w r3, [0x000121a8]
add r3, pc
blx sym.imp.schedule_set_id
cmp.w fp, 0
bne 0x11e2c
ldr r1, [r5, 4]
mov r0, r4
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0x11fc2
--
ldr r6, [0x000129f4]
add r2, pc
ldr.w sl, [0x000129f8]
ldr r3, [r2, r3]
add r6, pc
ldr.w fp, [sp, 0x48]
adds r6, 0xb8
add sl, pc
mov r1, r6
ldr r3, [r3]
str r3, [sp, 0x1c]
mov.w r3, 0
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
blx 0x42b8
mov r7, r0
cbnz r0, 0x128ce
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
cmp r0, 0
bne 0x129b0
--
add fp, pc
ldr r3, [r3]
str r3, [sp, 0x3c]
mov.w r3, 0
ldr r3, [sp, 0x68]
str r3, [sp, 0x18]
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
blx 0x42b8
mov sb, r0
cmp.w sl, 0
beq 0x12a7c
ldrb.w r3, [sl]
cmp r3, 0
bne.w 0x12c38
cmp.w sb, 0
bne.w 0x12bd4
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0x12c4c
--
add sb, pc
ldr r3, [r3]
str r3, [sp, 0x54]
mov.w r3, 0
ldr r3, [sp, 0x88]
mov r1, sl
str r3, [sp, 0x24]
ldrd r8, r3, [sp, 0x8c]
str r3, [sp, 0x28]
blx 0x4558
mov r4, r0
ldr r0, [r0, 4]
blx 0x42b8
vmov.i32 d16, 0
str r0, [sp, 0x2c]
vstr d16, [sp, 0x48]
cmp r0, 0
bne.w 0x12f8c
ldr r1, [r4, 4]
mov r0, r5
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0x12ff4
--
mov r2, r4
add r1, pc
adds r1, 0xb8
blx 0x3fa0
ldr r0, [r7, 0x30]
clz r0, r0
lsrs r0, r0, 5
ldr r2, [0x00013460]
ldr r3, [0x00013438]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x3c]
eors r2, r3
mov.w r3, 0
bne 0x13430
add sp, 0x44
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r1, [r4, 4]
mov r0, r7
blx sym.imp.__sprintf_chk
cbnz r0, 0x1341c
add.w r1, r8, r8, lsl 1
--
mov r5, r0
ldr r0, [r0, 4]
blx 0x42b8
ldr r3, [0x00013774]
mov r7, r0
str.w fp, [sl]
add.w sl, sp, 0x2c
movw r2, 0x11f
movs r1, 1
add r3, pc
mov r0, sl
str r3, [sp]
ldr r3, [0x00013778]
str.w r8, [sp, 4]
add r3, pc
blx sym.imp.schedule_set_id
cmp r7, 0
bne 0x1352a
ldr r1, [r5, 4]
mov r0, r4
blx sym.imp.__sprintf_chk
mov r3, r0
cmp r0, 0
--
add r3, pc
str r3, [sp, 0x24]
ldr r3, [sp, 0x24]
add r7, sp, 0x64
movw r2, 0x11f
movs r1, 1
mov r0, r7
strd sb, r3, [sp, 8]
ldr r3, [sp, 0x28]
str r3, [sp, 4]
ldr.w r3, [0x00013c94]
add r3, pc
str r3, [sp]
ldr.w r3, [0x00013c98]
add r3, pc
blx sym.imp.schedule_set_id
cmp.w fp, 0
bne 0x1391c
ldr r1, [r5, 4]
mov r0, r4
blx sym.imp.__sprintf_chk
cmp r0, 0
bne.w 0x13ab2
[*] Function sprintf used 18 times scheduled
