[*] Binary protection state of mkfs.ext3
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mkfs.ext3
ldr r3, [r2, r3]
ldr r2, [r3]
ldr.w r3, [sp, 0x41c]
eors r2, r3
mov.w r3, 0
bne 0x8656
addw sp, sp, 0x424
pop.w {r4, r5, r6, r7, r8, sb, pc}
ldr.w r8, [0x000086a0]
add r8, pc
b 0x8594
ldr.w sb, [0x000086a4]
add sb, pc
b 0x85a4
ldr r1, [0x000086a8]
mov r2, r7
movs r0, 1
add r1, pc
blx 0x3620
b 0x85d8
blx sym.imp.__sprintf_chk
ldr r2, [0x000086ac]
mov r1, r0
--
ldr.w sl, [r4, 0x10]
cmp r5, 0
ldr.w r3, [sl, 0x5c]
and sb, r3, 0x400
ble 0x9f9e
ldr.w fp, [r4, 0x14]
lsls r0, r5, 0xa
lsr.w r1, fp, 0xa
bl 0x11768
mov r4, r0
str r0, [r6]
cmp.w sb, 0
bne 0x9fc8
str.w sb, [r6, 4]
mov.w r3, 0x3c00
sub.w r2, r4, 0x400
movt r3, 0x9c
cmp r2, r3
bhi 0x9fea
mov r0, sl
blx sym.imp.__snprintf_chk
lsrs r0, r0, 1
orr.w r0, r0, r1, lsl 31
--
ldr r3, [r4, 0x30]
mov r6, r0
adds r0, 0x10
cmp r5, r3
ite ge
addge r0, r0, r5
addlt r0, r0, r3
blx sym.imp.strerror
mov r5, r0
str r0, [r4, 0x34]
cmp r0, 0
beq.w 0xaf44
adds r2, r6, 1
mov r1, r7
blx 0x30e0
add r5, r6
mov r0, r7
str r5, [r4, 0x20]
blx 0x3098
ldr.w r0, [sl, 0x10]
blx sym.imp.__snprintf_chk
ldrd r8, r2, [r4, 0x10]
ldr r3, [sp, 0x20]
--
cbz r0, 0xb158
b 0xb10c
mov r3, sl
mov r2, r4
mov r1, r5
mov r0, sb
blx 0x2fec
cmp r0, 0
bne 0xb10c
ldr r3, [sp, 0x30]
cbz r3, 0xb162
subs r4, r4, r3
add r5, r3
cmp r4, 0
bgt 0xb140
ldr r3, [sp, 0x20]
ldr r3, [r3, 0x14]
b 0xb0e0
movs r0, 5
b 0xb10c
blx sym.imp.__sprintf_chk
ldr r0, [r0]
b 0xb10c
--
blx 0x3098
cmp r4, 0
bne.w 0xb39e
mov r0, fp
add.w sl, sl, 1
blx sym.imp.e2p_os2string
ldr r3, [sp, 0xc]
add.w r4, sl, r0
cmp r3, r4
ble 0xb358
movs r3, 0
add.w fp, r6, r4
mov r1, fp
mov r2, r3
mov r0, r5
mov sl, r4
blx sym.imp.io_channel_write_blk64
adds r1, r0, 1
mov r4, r0
bne 0xb248
blx sym.imp.__sprintf_chk
ldr r2, [0x0000b408]
mov r3, fp
--
mov r1, r4
add r0, pc
blx 0x32cc
mov r0, r6
blx 0x3098
mov r0, sb
blx sym.imp.ext2fs_punch
cmp r0, 0
beq.w 0xb1a8
mov r1, r4
ldr r2, [0x0000b410]
cmp r4, 0
it eq
moveq r4, r0
ldr r0, [0x0000b414]
mov r3, r7
add r2, pc
add r0, pc
blx 0x32cc
b 0xb1a8
blx sym.imp.__sprintf_chk
ldr r2, [0x0000b418]
mov r3, r5
--
add r0, pc
blx 0x32cc
b 0xb316
mov r0, r6
blx 0x3098
mov r0, sb
blx sym.imp.ext2fs_punch
mov r4, r0
cmp r0, 0
beq.w 0xb1a8
ldr r2, [0x0000b438]
mov r3, r7
ldr r0, [0x0000b43c]
movs r1, 0
add r2, pc
add r0, pc
blx 0x32cc
b 0xb1a8
mov r0, r8
blx 0x3098
blx sym.imp.__sprintf_chk
ldr r2, [0x0000b440]
mov r3, fp
ldr r4, [r0]
ldr r0, [0x0000b444]
add r2, pc
str r5, [sp]
mov r1, r4
add r0, pc
blx 0x32cc
b 0xb2c4
ldr r2, [0x0000b448]
mov r3, fp
ldr r0, [0x0000b44c]
mov r1, r4
str r7, [sp]
add r2, pc
add r0, pc
blx 0x32cc
b 0xb316
blx sym.imp.__sprintf_chk
ldr r2, [0x0000b450]
mov r3, r5
--
str.w r8, [sp]
blx sym.imp.strcpy
mov r4, r0
cbz r0, 0xb94a
mov r0, r5
blx sym.imp.ext2fs_inode_table_loc
ldr.w r2, [0x0000bd3c]
ldr.w r3, [0x0000bd38]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x11c]
eors r2, r3
mov.w r3, 0
bne.w 0xbb62
mov r0, r4
add sp, 0x124
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
str r4, [sp, 0x28]
b 0xb8cc
blx sym.imp.__sprintf_chk
ldr r4, [r0]
mov r3, r8
--
and.w r3, r3, ip
str r4, [sp]
str r3, [sp, 8]
adc r3, sb, 0
str r3, [sp, 0xc]
bl 0xb048
cmp r0, 0
bne 0xbb66
ldrd r2, r3, [sp, 0x60]
cmp r7, r2
sbcs.w r3, sb, r3
blt 0xba4a
mov r0, sl
blx 0x3098
mov r0, r8
blx 0x3098
ldr r0, [sp, 0x2c]
blx 0x304c
mov r4, r0
b 0xb900
blx sym.imp.__sprintf_chk
ldr r4, [r0]
b 0xb900
--
mov r0, r7
blx 0x304c
b 0xb900
mov r0, r7
blx 0x3098
movw r3, 0xb750
movt r3, 0x7f2b
cmp sb, r3
beq 0xbc9c
mov r0, sl
blx 0x3098
mov r0, r8
blx 0x3098
ldr r0, [sp, 0x2c]
blx 0x304c
cmp.w sb, 0
ite ne
movne r4, sb
moveq r4, r0
b 0xb900
blx sym.imp.__sprintf_chk
ldr.w sb, [r0]
cmp.w sb, 0x5f
--
strd r8, sl, [sp, 0x10]
vstr d16, [sp]
strd r6, r7, [sp, 8]
bl 0xb048
mov sb, r0
b 0xbc64
ldr r2, [r1, -0x28]
ldr r3, [r1, -0x38]
ldr r4, [r1, -0x24]
adds r3, r3, r2
ldr r2, [r1, -0x34]
adc.w r2, r2, r4
cmp.w r0, 0x200
bne 0xbce4
ldr r1, [r1, -0x10]
lsls r1, r1, 0x1f
bpl.w 0xbbc2
mov r0, r7
blx 0x3098
b 0xbabc
blx sym.imp.__sprintf_chk
ldr r3, [r0]
ldr r2, [sp, 0x2c]
--
mov r3, r0
cmp r0, 0
bne.w 0xc49e
ldr r3, [sp, 0x1c]
mov r2, r5
ldr r1, [sp, 0x3c]
mov r0, fp
strd sl, r3, [sp, 4]
ldr r3, [sp, 0x24]
str r3, [sp]
ldr r3, [sp, 0x20]
bl 0xbd54
mov r3, r0
cmp r0, 0
bne.w 0xc41c
ldr r0, [0x0000c594]
add r0, pc
blx 0x329c
cmp r0, 0
beq.w 0xbff2
blx sym.imp.__sprintf_chk
ldr r6, [r0]
ldr r0, [0x0000c598]
ldr r2, [0x0000c59c]
mov r1, r6
ldr r7, [sp, 0x18]
add r0, pc
add r2, pc
adds r0, 0x4c
blx 0x32cc
b 0xc200
blx sym.imp.__sprintf_chk
ldr r6, [r0]
mov r3, r4
--
beq.w 0xc4de
ldr r2, [sp, 0x24]
ldr r3, [r2, 4]
str r0, [r2, 8]
adds r3, 4
str r3, [r2, 4]
ldr r3, [r2]
b 0xc0b4
mov r8, r6
mov r6, r0
ldr r0, [0x0000c5b0]
mov r3, r8
ldr r2, [0x0000c5b4]
mov r1, r6
ldr r7, [sp, 0x18]
add r0, pc
adds r0, 0x5c
add r2, pc
blx 0x32cc
b 0xbf1e
blx sym.imp.__sprintf_chk
ldr r6, [r0]
mov r3, r4
ldr r0, [0x0000c5b8]
ldr r2, [0x0000c5bc]
mov r1, r6
add r0, pc
add r2, pc
adds r0, 0x4c
blx 0x32cc
b 0xc0fe
blx sym.imp.__sprintf_chk
ldr r6, [r0]
mov r3, r5
--
movs r3, 3
b 0xbeca
movs r3, 4
b 0xbeca
movs r3, 7
b 0xbeca
movs r3, 5
b 0xbeca
ldr r0, [0x0000c5e4]
movs r1, 0
ldr r2, [0x0000c5e8]
ldr r7, [sp, 0x18]
add r0, pc
add r2, pc
adds r0, 0x4c
blx 0x32cc
mov r0, r6
movs r6, 0
blx 0x3098
b 0xc200
blx sym.imp.__sprintf_chk
mov sb, r6
ldr r6, [r0]
--
mov r0, r4
add sp, 0x34
pop.w {r4, r5, r6, r7, r8, sb, pc}
ldr r0, [0x0000c6f8]
mov r1, r4
ldr r2, [0x0000c6fc]
add r0, pc
add r2, pc
adds r0, 0x78
blx 0x32cc
b 0xc684
ldr r0, [0x0000c700]
movs r4, 0x1e
ldr r2, [0x0000c704]
add r0, pc
add r2, pc
adds r0, 0x78
blx 0x32cc
b 0xc690
blx 0x31f4
blx sym.imp.__sprintf_chk
ldr r4, [r0]
ldr r0, [0x0000c708]
--
ldr r3, [sp, 0x14]
mov r0, r3
blx 0x3098
ldr r1, [r5, 4]!
mov r0, r6
cbz r1, 0xcd0e
bl 0xf4e0
cbnz r0, 0xcd22
cmp r4, r8
bne 0xcce6
movs r3, 0
mov r0, r6
str r3, [r7]
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
b.w 0x3094
ldr r3, [0x0000cd70]
ldr.w r3, [sl, r3]
ldr r3, [r3]
str r3, [sp, 0x14]
blx sym.imp.__sprintf_chk
ldr r0, [r0]
blx sym.imp.ext2fs_add_journal_inode3
--
blx 0x3620
ldr r2, [0x0000d5d8]
ldr r3, [0x0000d5cc]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x8c]
eors r2, r3
mov.w r3, 0
bne.w 0xd5a8
mov r0, r4
add sp, 0x94
pop.w {r4, r5, r6, r7, r8, sb, pc}
cbz r6, 0xd392
movs r3, 1
str r3, [r6]
lsls r3, r5, 0x1d
bmi 0xd3d4
movs r4, 1
b 0xd36e
blx sym.imp.__sprintf_chk
mov sb, r0
ldr r0, [r0]
--
mov.w r3, 0
strd r1, r1, [r6]
add r0, pc
strd r1, r1, [r6, 8]
str r1, [r6, 0x10]
bl 0xd7cc
mov r8, r0
cbz r0, 0xdd6c
ldr r2, [0x0000de04]
ldr r3, [0x0000ddfc]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr.w r3, [sp, 0x814]
eors r2, r3
mov.w r3, 0
bne 0xdde2
mov r0, r8
addw sp, sp, 0x81c
pop.w {r4, r5, r6, r7, r8, sb, pc}
blx sym.imp.__sprintf_chk
ldr r1, [0x0000de08]
mov r4, r0
--
bne 0xdee2
bl 0xd6c4
ldr r0, [r4, 4]
blx 0x3098
mov r0, r4
blx 0x3098
b 0xde74
movs r5, 0xc
b 0xde74
ldr r5, [r4, 0x14]
cbz r5, 0xdf06
ldr r6, [r5]
movw r3, 0x6001
movt r3, 0xaaca
cmp r6, r3
beq 0xdf1a
ldr r0, [r4, 4]
blx 0x3098
mov r0, r4
blx 0x3098
blx sym.imp.__sprintf_chk
ldr r5, [r0]
b 0xde74
--
ldrd r2, r3, [sp, 0x14]
movs r4, 0
str r2, [r3]
b 0xe566
mov r0, r4
blx 0x3098
b 0xe3ac
add.w r1, sl, 0xb
mov r0, sb
lsls r1, r1, 2
add.w sl, sl, 0xa
blx 0x3254
cmp r0, 0
beq 0xe5a2
mov sb, r0
b 0xe432
mov r0, r6
mov r6, sb
blx sym.imp.ext2fs_badblocks_list_iterate
b 0xe4ba
blx sym.imp.__sprintf_chk
ldr r4, [r0]
cmp r4, 0
--
mov.w r5, 0
ldrd r5, r6, [sp, 0x30]
str r5, [r6]
cbz r0, 0xe92c
add r4, sp, 0xc
str r4, [sp]
bl 0xe1b0
movw r3, 0x9ffe
mov r4, r0
movt r3, 0x5535
add r3, r0
cmp r3, 1
itt ls
movls r4, 0
strls r5, [r6]
bls 0xe92c
cbnz r4, 0xe92c
ldr r5, [sp, 0xc]
ldrb r3, [r5]
cbz r3, 0xe950
blx sym.imp.__sprintf_chk
mov r2, r4
str r4, [r0]
--
mov.w r5, 0
ldrd r5, r6, [sp, 0x30]
str r5, [r6]
cbz r0, 0xe9da
add r4, sp, 0xc
str r4, [sp]
bl 0xe1b0
movw r3, 0x9ffe
mov r4, r0
movt r3, 0x5535
add r3, r0
cmp r3, 1
itt ls
movls r4, 0
strls r5, [r6]
bls 0xe9da
cbnz r4, 0xe9da
ldr r5, [sp, 0xc]
ldrb r3, [r5]
cbz r3, 0xe9fe
blx sym.imp.__sprintf_chk
mov r2, r4
str r4, [r0]
--
ldr r5, [r5]
str r5, [sp, 0x14]
mov.w r5, 0
ldr r5, [sp, 0x38]
vstr d0, [r5]
cbz r0, 0xea88
add r4, sp, 0xc
vmov.f64 d8, d0
str r4, [sp]
bl 0xe1b0
movw r3, 0x9ffe
mov r4, r0
movt r3, 0x5535
add r3, r0
cmp r3, 1
bls 0xeaa6
cbnz r0, 0xea88
ldr r6, [sp, 0xc]
ldrb r3, [r6]
cbz r3, 0xeaae
blx sym.imp.__sprintf_chk
add r1, sp, 0x10
str r4, [r0]
--
lsls r2, r5, 0xa
movs r3, 0
blx r1
cmp r0, 0
add r6, pc
blt 0xfd7e
cmp.w r0, 0x400
bne 0xfd6c
add sp, 0x10
pop {r4, r5, r6, pc}
rsb.w r2, r0, 0x400
movs r1, 0
add r0, r4
add sp, 0x10
pop.w {r4, r5, r6, lr}
b.w sym.imp.strncpy
ldr r3, [0x0000fdb8]
movs r4, 0x45
ldr r3, [r6, r3]
ldr r6, [r3]
blx sym.imp.__sprintf_chk
ldr r0, [r0]
blx sym.imp.ext2fs_add_journal_inode3
--
push {r4, r5, r6, lr}
mov.w r3, 0x400
sub sp, 0x10
mov r4, r1
adds r0, 0x10
ldr r1, [r0, 0x10]
ldr r5, [0x0000fe3c]
strd r2, r3, [sp]
lsls r2, r4, 0xa
movs r3, 0
blx r1
cmp r0, 0
add r5, pc
blt 0xfdf8
cmp.w r0, 0x400
ite ne
mvnne r0, 0x1b
movs r0, 0
add sp, 0x10
pop {r4, r5, r6, pc}
blx sym.imp.__sprintf_chk
ldr r0, [r0]
cmp r0, 0x1c
--
beq 0x10b6c
ldrd r3, r2, [r4, 0x48]
mov r5, r0
orrs r3, r2
beq 0x10bbe
ldr r3, [r6, 0x40]
mov r1, r4
mov r0, r5
ldr r3, [r3]
blx r3
ldr r3, [r6, 0x3c]
add.w r0, r6, 0x10
strd r5, r3, [sp]
ldr r1, [r6, 0x20]
ldrd r2, r3, [r4, 0x48]
blx r1
ldr r3, [r6, 0x3c]
mov r6, r0
cmp r3, r0
beq 0x10b4c
blx sym.imp.__sprintf_chk
cmp r6, 0
bne 0x10c10
--
adds r2, 0x8c
add r3, pc
strd r1, r2, [sp]
movs r1, 1
ldr r2, [0x00010c34]
add r2, pc
blx sym.imp.ext2fs_write_inode
ldr r2, [0x00010c38]
ldr r3, [0x00010c20]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x14]
eors r2, r3
mov.w r3, 0
bne 0x10c18
mov r0, r5
add sp, 0x18
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
b.w 0x3094
blx sym.imp.__sprintf_chk
ldr r3, [0x00010c28]
movs r2, 0xc
--
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x14]
eors r2, r3
mov.w r3, 0
bne 0x10c18
add sp, 0x18
pop.w {r4, r5, r6, r7, r8, sb, sl, pc}
mov.w r8, 1
movs r3, 0
add r2, sp, 0x10
mov r1, r4
mov r0, r6
str.w r8, [sp, 0x10]
bl 0x10410
cmp r0, 0
bge 0x10af0
ldr r3, [0x00010c28]
ldr r3, [r7, r3]
ldr.w sb, [r3]
blx sym.imp.__sprintf_chk
ldr r0, [r0]
ldr.w sl, [r4, 4]
--
movs r2, 1
mov r1, r4
mov r0, r5
bl 0x10284
mov r3, r1
cmp r0, 1
sbcs r1, r3, 0
blt 0x10d5a
strd r0, r3, [r4, 0x48]
mov r2, r0
str r6, [sp]
add.w r0, r5, 0x10
ldr r1, [r5, 0x3c]
str r1, [sp, 4]
ldr r1, [r5, 0x1c]
blx r1
ldr r3, [r5, 0x3c]
mov r8, r0
cmp r3, r0
beq 0x10d50
blx sym.imp.__sprintf_chk
cmp.w r8, 0
bne 0x10d68
[*] Function printf used 32 times mkfs.ext3
