[*] Binary protection state of busybox.nosuid
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of busybox.nosuid
add r0, pc
bl 0x530c
pop {r3, pc}
nop
ldrh r2, [r5, 0x3c]
movs r3, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
movs r3, 0
ldr r6, [0x00006f8c]
sub sp, 0x2c
mov r4, r1
movs r1, 0x3a
ldr r2, [0x00006f90]
mov r5, r0
add r6, pc
ldr r2, [r6, r2]
ldr r2, [r2]
str r2, [sp, 0x24]
mov.w r2, 0
strb.w r3, [sp, 0x1f]
blx sym.imp.__dprintf_chk
cmp r0, 0
beq 0x6cee
--
ldr r0, [0x000072b4]
mov r1, r5
add r0, pc
bl 0x51f4
sub.w r2, r3, 9
cmp r3, 0x20
it ne
cmpne r2, 4
ite ls
movls r4, 1
movhi r4, 0
bls 0x71a6
ldr r3, [0x000072b8]
mov r2, r1
add r1, sp, 0x10
add r3, pc
ldr.w sb, [r3]
ldr.w r3, [sb]
str.w r4, [sb]
str r3, [sp, 8]
blx sym.imp.__fprintf_chk
mov r4, r1
ldr.w r1, [sb]
--
sub sp, 0xc
ldr r3, [0x000074d8]
add r1, pc
ldr r3, [r1, r3]
ldr r3, [r3]
str r3, [sp, 4]
mov.w r3, 0
cbnz r4, 0x747e
mov r4, sp
ldr r1, [0x000074dc]
str r0, [r4]
ldrb r3, [r0]
add r1, pc
ldr r5, [r1]
sub.w r1, r3, 0x30
cmp r1, 9
bhi 0x74b8
movs r3, 0
mov r1, r4
str r3, [r5]
blx sym.imp.__fprintf_chk
ldr r2, [r4]
bl 0x7428
--
ldr r3, [0x00010b7c]
mov r5, r0
add r4, pc
mov r0, r1
ldr r3, [r4, r3]
ldr r3, [r3]
str r3, [sp, 0x14]
mov.w r3, 0
bl 0x5e70
mov r4, r0
bl 0x3f552
mov r0, r4
bl 0x3f558
adds r0, 1
bne 0x10b0a
ldr r0, [0x00010b80]
add r0, pc
bl 0x6a78
movs r1, 0x3a
mov r0, r6
blx sym.imp.__dprintf_chk
mov r7, r0
cbz r0, 0x10b28
--
bic r3, r3, 7
sub.w sp, sp, r3
ldr r3, [r7, 0x18]
mov r0, sp
str r0, [r3, 0x14]
bl 0x3c3d4
ldr r3, [r7, 0x18]
mov r0, r5
str r5, [r7, 0x14]
b 0x1d5ae
sub.w sl, sl, 0x30
cmp.w sl, 9
bhi 0x1d5bc
ldr r2, [r7, 8]
add.w r1, r7, 0x14
ldr r3, [r7, 0x18]
ldr r5, [r2]
movs r2, 0
str r2, [r3, 0x14]
str r2, [r5]
blx sym.imp.__fprintf_chk
ldr r2, [r5]
ldr r3, [r7, 0x18]
--
strh r6, [r5, 0x14]
movs r3, r0
cmp r5, 0x2e
movs r2, r0
cmp r5, 0x26
movs r2, r0
lsls r0, r6, 0x11
movs r0, r0
pop {r0, r3, r5, r6}
movs r1, r0
pop {r0, r4, pc}
movs r1, r0
cmp r5, 0xb1
movs r0, r0
invalid
pop {r0, r1, r4, r5, r6}
movs r1, r0
push {r3, r4, r5, lr}
movs r1, 0x2e
mov r5, r0
blx sym.imp.__dprintf_chk
mov r4, r0
cbz r0, 0x219a0
ldrb r3, [r0, 1]
adds r0, 1
cmp r3, 0x67
beq 0x21990
ldr r1, [0x000219a4]
movs r4, 0
add r1, pc
blx 0x3954
cbnz r0, 0x219a0
mov r0, r5
bl 0x5abc
movs r1, 0x2e
mov r4, r0
blx sym.imp.__dprintf_chk
movs r2, 0x61
movs r3, 0x72
--
ldr r2, [r6, 0x24]
movs r3, r0
asrs r6, r0, 0x16
movs r2, r0
strb r4, [r6, 0x17]
movs r3, r0
lsls r0, r6, 0x11
movs r0, r0
asrs r6, r5, 0x14
movs r2, r0
strd pc, pc, [r5], -0x3fc
ldc2 p15, c15, [r7], {0xff}
push {r3, r4, r5, lr}
mov r4, r0
ldr r3, [0x000231bc]
add r3, pc
ldr r3, [r3]
lsls r3, r3, 0x1a
bpl 0x2319a
movs r1, 0x2e
blx sym.imp.__dprintf_chk
mov r5, r0
cbnz r0, 0x231a8
--
eors r2, r3
mov.w r3, 0
bne.w 0x24898
mov r0, r7
add sp, 0x84
pop.w {r4, r5, r6, r7, r8, sb, lr}
b.w 0x3d542
ldrb r3, [r0, 1]
cmp r3, 0
beq 0x246d2
cmp r6, 0
bne.w 0x24988
subs.w r8, r8, 1
add.w r4, r4, 1
bne 0x246c6
ldr.w sb, [r7]
tst.w sb, 2
beq 0x2473a
movs r1, 0x2f
mov r0, r4
blx sym.imp.__dprintf_chk
mov r8, r0
cbz r0, 0x2473a
--
movs r3, r0
lsls r0, r5, 0x11
movs r0, r0
asrs r4, r3
movs r3, r0
push {r4, r5, lr}
mov r5, r1
ldr r1, [0x00025ae0]
sub sp, 0xc
movs r3, 0
mov r4, r0
ldr r2, [0x00025ae4]
add r1, pc
ldr r2, [r1, r2]
mov r1, sp
ldr r2, [r2]
str r2, [sp, 4]
mov.w r2, 0
strb r3, [r0, r5]
movs r2, 8
blx sym.imp.__fprintf_chk
ldr r3, [sp]
ldrb r3, [r3]
--
ldr r1, [0x0002cc18]
mov r0, r4
movs r6, 0
ldr r5, [0x0002cc1c]
add r1, pc
bl 0x6904
ldr r3, [0x0002cc20]
add r5, pc
and r7, r0, 1
ldr r3, [r5, r3]
ldr r3, [r3]
ldr.w r0, [r4, r3, lsl 2]
add.w r4, r4, r3, lsl 2
mov.w r1, 0x900
bl 0x3c200
subs r5, r0, 0
it lt
movlt r6, 1
blt 0x2cbf8
cbz r7, 0x2cc04
blx sym.imp.__snprintf_chk
cbnz r0, 0x2cc0c
mov r0, r5
--
adds r1, r7, 1
bl 0x5a94
ldr r1, [sp, 0x18]
blx 0x3d58
mov r5, r0
mov r0, sl
blx 0x3a68
ldr r2, [sp, 0x14]
ldrb r3, [r2]
cmp r3, 0
bne 0x37c16
ldr r3, [0x00037f4c]
add r3, pc
cmp r4, r3
beq 0x37c84
mov r0, r4
blx 0x3a68
movs r1, 0xa
mov r0, r5
strd r5, r5, [r6, 0x24]
blx sym.imp.__dprintf_chk
str r0, [sp, 0x14]
cbz r0, 0x37c98
--
mov r0, r8
strb.w r3, [sp, 0x1c]
mov sl, fp
blx 0x3ff8
add r7, r0
b 0x37c4c
cbnz r4, 0x37e64
mov r0, r4
bl 0x3b5a4
mov r4, r0
cbnz r0, 0x37e9a
ldr r4, [sp, 8]
cmp.w fp, 0x77
str r4, [sp, 0x18]
itt eq
moveq r0, r4
moveq sl, 0
beq 0x37d96
movs r1, 0x2f
mov r0, r4
blx sym.imp.__dprintf_chk
mov sl, r0
mov.w fp, 0x57
--
movs r2, r0
lsls r0, r3, 0x11
movs r0, r0
ldr r2, [0x000386a0]
ldr r3, [0x000386a4]
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov sb, r1
add r2, pc
ldr r5, [0x000386a8]
sub sp, 0x9c
movs r1, 0x2f
ldr r3, [r2, r3]
mov r8, r0
ldr r6, [0x000386ac]
add r5, pc
ldr r3, [r3]
str r3, [sp, 0x94]
mov.w r3, 0
str r5, [sp, 0x90]
add r6, pc
blx sym.imp.__dprintf_chk
mov r4, r0
cbnz r0, 0x3840e
--
ldr r3, [sp, 0x28]
str r3, [r4, 0x3c]
ldr r3, [sp, 0x2c]
str r3, [r4, 0x40]
cmp.w r8, 0
beq.w 0x3a218
ldr r3, [0x0003a320]
add r5, sp, 0xac
mov r1, r5
add r3, pc
ldr r0, [r3]
ldrb r3, [r3, 4]
str r0, [r7]
mov r0, sl
strb r3, [r7, 4]
bl 0x3f1ca
cmp r0, 0
blt.w 0x39ff2
mov r0, r5
movs r1, 0x29
blx sym.imp.__dprintf_chk
movs r2, 0
mov r3, r0
--
str r4, [r7]
cmp r6, 0x5b
mov r5, r1
mov r4, r3
bne 0x3b2a2
add.w sb, r0, 1
movs r1, 0x5d
mov r0, sb
blx 0x401c
mov r6, r0
cmp r0, 0
bne.w 0x3b42e
ldr r0, [0x0003b444]
mov r1, r8
add r0, pc
bl 0x5228
lsls r2, r4, 0x1e
bpl.w 0x3b42a
bl 0x5690
movs r1, 0x3a
blx sym.imp.__dprintf_chk
mov r6, r0
cmp r0, 0
--
mov r0, r4
pop {r3, r4, r5, pc}
invalid
invalid
invalid
push {r3, r4, r5, r6, r7, lr}
movs r2, 0
ldr r3, [0x0003b6d8]
mov r6, r0
add r3, pc
ldr r5, [r3]
str r2, [r5]
bl 0x3f5c2
mov r4, r0
cbnz r0, 0x3b692
ldr r3, [r5]
cmp r3, 2
bne 0x3b692
movs r1, 0x2f
mov r0, r6
blx sym.imp.__dprintf_chk
mov r5, r0
mov r0, r6
--
bne 0x3bee0
mov r5, r8
mov r0, r5
pop.w {r4, r5, r6, r7, r8, pc}
cbz r1, 0x3bf22
ldrb r3, [r0], 1
cmp r3, 0
bne 0x3bf16
ldrb r3, [r0]
cbnz r3, 0x3bf24
bx lr
subs r1, 1
beq 0x3bf22
ldrb r3, [r0], 1
cmp r3, 0
bne 0x3bf16
b 0x3bf1e
push {r4, lr}
movs r1, 0x2f
mov r4, r0
blx sym.imp.__dprintf_chk
cbz r0, 0x3bf40
adds r4, r0, 1
mov r0, r4
pop {r4, pc}
push {r4, lr}
movs r1, 0x2f
mov r4, r0
blx sym.imp.__dprintf_chk
cbnz r0, 0x3bf54
mov r0, r4
[*] Function printf used 19 times busybox.nosuid
