[*] Binary protection state of dbox
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of dbox
blx 0x2e9c
movs r3, 0
mov r6, r0
str r3, [r6]
mov r0, r7
movs r2, 0xa
add r1, sp, 0x20
blx sym.imp.connect
ldr r6, [r6]
mov sb, r0
mov r8, r1
cmp r6, 0
bne 0x35fc
ldr r3, [sp, 0x20]
ldrb r3, [r3]
cmp r3, 0
bne 0x35fc
ldr r0, [r5, 0xc]
blx 0x2fa4
mov sl, r0
blx sym.imp.__snprintf_chk
cbz r0, 0x3566
subs r0, 1
--
ldr r2, [sp, 0x20]
movw r1, 0x2712
mov r0, r5
blx sym.imp.fgets
cmp r0, 0
bne 0x37ea
mov r2, r4
movw r1, 0x2737
mov r0, r5
blx sym.imp.fgets
cbnz r0, 0x37ea
ldr r2, [sp, 0x14]
movs r1, 0xd
mov r0, r5
blx sym.imp.fgets
cbnz r0, 0x37ea
mov r0, r5
blx sym.imp.curl_easy_perform
cbnz r0, 0x37f8
mov r0, r4
blx sym.imp.__asprintf_chk
mov r0, r5
blx sym.imp.getopt
--
pop {r4, r5, r6, pc}
mov.w r5, -1
mov r0, r5
pop {r4, r5, r6, pc}
nop
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
sub sp, 0x1c
strd r0, r1, [sp, 0x10]
mov r0, r3
mov r4, r2
ldr r7, [sp, 0x40]
str r3, [sp, 8]
str r2, [sp, 0xc]
blx 0x2b04
cmp r0, 0
beq 0x3e68
mov sl, r0
mov r0, r4
cmp r4, 0
beq 0x3e62
blx sym.imp.__snprintf_chk
mov sb, r0
ldr r0, [sp, 8]
blx sym.imp.__snprintf_chk
mov r8, r0
mov r0, sl
--
mov r0, r5
strb r6, [r4, -0x1]
blx 0x2a8c
mov r3, r0
cmp r0, 0
beq 0x5140
ldrb r2, [r0, 1]
cmp r2, 0x20
bne 0x5140
movs r1, 0x28
mov r0, r5
strb r6, [r3]
blx 0x2a8c
cmp r0, 0
beq 0x5140
ldrb r3, [r0, 1]
cmp r3, 0
beq 0x5140
adds r4, r0, 1
mov r0, r4
blx sym.imp.__snprintf_chk
mov r1, r4
adds r2, r0, 1
--
nop
str r4, [r1, 0x60]
movs r0, r0
str r0, [sp, 0x170]
movs r1, r0
lsls r4, r5, 9
movs r0, r0
ldr r4, [sp, 0x250]
movs r1, r0
ldr r4, [sp, 0x158]
movs r1, r0
ldrh r4, [r4, 0x3a]
movs r1, r0
ldr r3, [sp, 0x220]
movs r1, r0
push {r3, r4, r5, r6, r7, lr}
mov r6, r0
mov r5, r1
movs r0, 1
movs r1, 0x10
blx sym.imp.__vfprintf_chk
mov r4, r0
cbz r0, 0x5e7c
str r6, [r0, 8]
cbz r5, 0x5e7c
mov r0, r5
blx sym.imp.__snprintf_chk
mov r6, r0
cbnz r0, 0x5e80
--
mov r6, r1
ldr r1, [0x00006000]
sub.w sp, sp, 0x210
add r5, sp, 0xc
mov r4, r0
ldr r3, [0x00006004]
mov r7, r2
add r1, pc
mov.w r2, 0x200
mov r0, r5
ldr r3, [r1, r3]
movs r1, 0
ldr r3, [r3]
str r3, [sp, 0x20c]
mov.w r3, 0
blx 0x2aec
ldr.w r8, [r4]
cmp.w r8, 0
beq.w 0x5fde
mov r0, r8
blx sym.imp.__snprintf_chk
mov r1, r8
mov r2, r0
mov.w r3, 0x200
mov r0, r5
blx 0x2a44
mov r8, r0
mov r0, r6
blx sym.imp.__snprintf_chk
mov r1, r6
mov r2, r0
--
ldrh r0, [r3, 0x18]
movs r1, r0
ldr r4, [r5, r2]
movs r0, r0
mov.w r3, -1
clz r0, r0
lsr.w r0, r3, r0
adds r0, 1
bx lr
push {r4, lr}
movs r1, 0x4c
movs r4, 0x10
cbz r0, 0x62c0
clz r0, r0
mov.w r4, -1
lsrs r4, r0
adds r1, r4, 4
adds r4, 1
lsls r1, r1, 2
movs r0, 1
blx sym.imp.__vfprintf_chk
str r4, [r0, 4]
pop {r4, pc}
--
cbz r4, 0x62ee
ldr r0, [r4, 4]
blx 0x2968
ldr r4, [r4]
cmp r4, 0
bne 0x62e0
ldr r3, [r7, 4]
adds r5, 1
cmp r3, r5
bhi 0x62da
mov r0, r7
pop.w {r3, r4, r5, r6, r7, lr}
b.w sym.imp.free
bx lr
push.w {r3, r4, r5, r6, r7, r8, sb, lr}
mov r7, r0
mov sb, r1
mov r8, r3
cbnz r2, 0x636c
mov r0, r1
blx sym.imp.__snprintf_chk
mov r4, r0
mov ip, r0
--
subs r1, 1
str r1, [r5]
str r3, [r2]
blx 0x2968
movs r0, 0
pop {r3, r4, r5, pc}
ldr r3, [r5]
subs r3, 1
str r3, [r5]
str r4, [r2, 8]
blx 0x2968
movs r0, 0
pop {r3, r4, r5, pc}
nop
push.w {r4, r5, r6, r7, r8, lr}
mov r8, r0
mov r7, r1
mov r6, r3
cbnz r2, 0x6440
mov r0, r1
blx sym.imp.__snprintf_chk
mov r5, r0
mov r4, r0
--
add sp, 8
ldr lr, [sp], 4
add sp, 0xc
bx lr
blx sym.imp.fork
nop
ldrh r2, [r7, 4]
movs r1, r0
lsls r4, r5, 9
movs r0, r0
ldrh r6, [r5, 4]
movs r1, r0
lsls r4, r7, 9
movs r0, r0
ldrh r0, [r2, 4]
movs r1, r0
push {r3, r4, r5, lr}
movs r1, 0x10
mov r5, r0
movs r0, 1
blx sym.imp.__vfprintf_chk
movs r3, 1
mov r4, r0
--
mov r4, r0
ldr.w r2, [0x000069dc]
add r1, pc
ldr.w r3, [0x000069e0]
add.w r0, r7, 0x10a0
str r6, [r7, 4]
adds r0, 0x14
ldr r2, [r1, r2]
add.w r5, r7, 0x1020
add r3, pc
adds r5, 8
ldr r2, [r2]
str r2, [r0]
mov.w r2, 0
ldm.w r3, {r0, r1, r2}
stm.w r5, {r0, r1, r2}
cmp r6, 0
beq.w 0x690a
mov r0, r6
mov r8, r6
blx sym.imp.__snprintf_chk
add.w r3, r0, 0x13
mov r1, r8
--
str.w r3, [r5, 0x114]
b 0x6792
str.w r8, [r7, 4]
ldr r0, [r4, 4]
cmp r0, 0
beq.w 0x65dc
b 0x65ce
add.w r1, r5, 0xc
ldr r0, [r4, 8]
bl 0x6370
mov r0, r5
blx 0x2968
movs r3, 0
strd r3, r3, [fp, -0x98]
b 0x6792
mov r0, r5
blx 0x2968
b 0x676e
mov.w r1, 0x118
movs r0, 1
blx sym.imp.__vfprintf_chk
mov r5, r0
add.w r6, r0, 0x18
--
ldr.w r0, [sb, r7, lsl 3]
blx sym.imp.CGI_cleanup
ldr.w r3, [sb, r7, lsl 3]
adds r7, 1
ldr r2, [r6]
ldr.w r1, [r8, r0, lsl 2]
and r3, r3, 0x1f
lsl.w r3, r4, r3
cmp r2, r7
orr.w r3, r3, r1
str.w r3, [r8, r0, lsl 2]
bgt 0x72a0
add r3, sp, 0xa4
movs r2, 0x80
mov r1, r8
mov r0, r3
str r3, [sp, 0x14]
blx sym.imp.curl_global_init
movs r1, 1
mov.w r0, 0x32000
blx sym.imp.__vfprintf_chk
mov sb, r0
cmp r0, 0
--
cmp r3, 0
bgt 0x7302
movs r4, 0
b 0x73ba
movs r4, 0
b 0x73c0
blx sym.imp.fork
nop
ldrb r0, [r7, 0xb]
movs r1, r0
lsls r4, r5, 9
movs r0, r0
ldrb r0, [r4, 6]
movs r1, r0
push {r4, r5, r6, lr}
mov r6, r0
mov r5, r1
movs r0, 1
movs r1, 0xc
mov r4, r2
blx sym.imp.__vfprintf_chk
cbz r0, 0x7424
strd r5, r6, [r0]
--
ldr r2, [r3]
ldr r3, [sp, 0x1ac]
eors r2, r3
mov.w r3, 0
bne 0x7630
movs r0, 0
add sp, 0x1b4
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r3, [r5]
movs r2, 1
mov r0, r6
str r3, [sp, 4]
ldr r3, [0x00007674]
add r3, pc
str r3, [sp]
movs r3, 0xa
mov r1, r3
blx sym.imp.getcwd
movs r1, 1
movs r0, 0x58
blx sym.imp.__vfprintf_chk
mov r7, r0
cmp r0, 0
--
ldr.w r3, [fp, r3]
ldr r3, [r3]
cmp r3, r7
bge 0x83d8
ldr.w r3, [r6, r5, lsl 2]
add.w r2, r6, r5, lsl 2
str r2, [sp, 0x18]
str r3, [sp, 0xc]
ldrb r3, [r3]
cmp r3, 0x2f
beq.w 0x8606
cmp r3, 0x2e
beq.w 0x8612
ldr r0, [0x00008670]
add r0, pc
blx 0x2f38
cbz r0, 0x84fa
blx 0x2fa4
mov r5, r0
cbz r0, 0x84fa
blx sym.imp.__snprintf_chk
adds r6, r5, r0
mov r7, r0
cmp r5, r6
bhs.w 0x863e
mov r0, r5
mov.w sl, 1
mov r7, r4
b 0x84c4
strb r7, [r0], 1
cmp r0, r6
add.w sl, sl, 1
bhs 0x84ce
movs r1, 0x3a
blx 0x2f74
cmp r0, 0
bne 0x84b8
mov r0, r5
blx sym.imp.__snprintf_chk
str r5, [sp, 0x14]
mov r7, r0
--
movs r2, 0
ldr.w r0, [r6, r3, lsl 2]
mov r1, r2
adds r5, 2
blx 0x2ac8
str.w r0, [r8, r4, lsl 2]
adds r4, 1
b 0x83a2
add r0, sp, 0x20
movs r4, 0
bl 0x8978
b 0x83d8
ldr r5, [0x00008674]
movs r7, 4
mov.w sl, 5
movs r3, 0
str r3, [sp, 0x14]
add r5, pc
ldr r6, [0x00008678]
ldr r0, [sp, 0xc]
blx sym.imp.__snprintf_chk
add r6, pc
mov r8, r0
--
strb r1, [r6, r7]
add.w r2, r8, 1
mov r1, fp
add.w r0, r6, sb
blx sym.imp.curl_global_init
ldr r1, [sp, 8]
mov r0, r6
blx sym.imp.kill
cbnz r0, 0x856e
ldr r3, [sp, 0xc]
sub.w r2, r3, 0x278
ldr r2, [r2, 0x10]
and r2, r2, 0xf000
cmp.w r2, 0x8000
beq 0x8580
add r5, sb
adds r4, 1
cmp r4, sl
beq 0x85fc
mov r0, r5
blx sym.imp.__snprintf_chk
mov r7, r0
b 0x8524
--
mov r1, r6
mov r0, r4
mov r4, r7
blx sym.imp.fileno
b 0x83d8
ldr r0, [sp, 0x14]
movs r4, 1
blx 0x2968
b 0x83d8
ldr r5, [0x00008684]
movs r7, 1
mov sl, r7
str r4, [sp, 0x14]
add r5, pc
b 0x8508
mov.w r1, 0x1000
sub.w r0, sb, 4
blx sym.imp.accept
mov r5, r0
mov.w sl, 1
blx sym.imp.__snprintf_chk
mov r3, r0
movs r2, 0x2f
add r3, r5
strb r2, [r5, r0]
mov r0, r5
strb r4, [r3, 1]
blx sym.imp.__snprintf_chk
str r4, [sp, 0x14]
mov r7, r0
--
movs r1, 0
ldr.w r5, [0x00008ebc]
add r6, pc
ldr r0, [r0, 0x1c]
str r2, [r4, 0xc]
movs r2, 1
ldr r5, [r6, r5]
ldr.w r3, [0x00008ec0]
add r0, r2
ldr r5, [r5]
str r5, [sp, 0x64]
mov.w r5, 0
ldr.w r5, [0x00008ec4]
add r3, pc
strd r1, r1, [sp, 0x3c]
movs r1, 0xb4
str r3, [sp, 0x38]
add r5, pc
str r2, [sp, 0x34]
str r5, [sp, 0x14]
blx sym.imp.__vfprintf_chk
str r0, [sp, 0x30]
cmp r0, 0
--
ldr.w r3, [fp, r3]
ldr r3, [r3]
cmp r3, r7
bge 0x9d74
ldr.w r3, [r6, r5, lsl 2]
add.w r2, r6, r5, lsl 2
str r2, [sp, 0x18]
str r3, [sp, 0xc]
ldrb r3, [r3]
cmp r3, 0x2f
beq.w 0x9fa8
cmp r3, 0x2e
beq.w 0x9fb4
ldr r0, [0x0000a014]
add r0, pc
blx 0x2f38
cbz r0, 0x9e9c
blx 0x2fa4
mov r5, r0
cbz r0, 0x9e9c
blx sym.imp.__snprintf_chk
adds r6, r5, r0
mov r7, r0
cmp r5, r6
bhs.w 0x9fe0
mov r0, r5
mov.w sl, 1
mov r7, r4
b 0x9e66
strb r7, [r0], 1
cmp r0, r6
add.w sl, sl, 1
bhs 0x9e70
movs r1, 0x3a
blx 0x2f74
cmp r0, 0
bne 0x9e5a
mov r0, r5
blx sym.imp.__snprintf_chk
str r5, [sp, 0x14]
mov r7, r0
--
movs r2, 0
ldr.w r0, [r6, r3, lsl 2]
mov r1, r2
adds r5, 2
blx 0x2ac8
str.w r0, [r8, r4, lsl 2]
adds r4, 1
b 0x9d3e
add r0, sp, 0x20
movs r4, 0
bl 0x8978
b 0x9d74
ldr r5, [0x0000a018]
movs r7, 4
mov.w sl, 5
movs r3, 0
str r3, [sp, 0x14]
add r5, pc
ldr r6, [0x0000a01c]
ldr r0, [sp, 0xc]
blx sym.imp.__snprintf_chk
add r6, pc
mov r8, r0
--
strb r1, [r6, r7]
add.w r2, r8, 1
mov r1, fp
add.w r0, r6, sb
blx sym.imp.curl_global_init
ldr r1, [sp, 8]
mov r0, r6
blx sym.imp.kill
cbnz r0, 0x9f10
ldr r3, [sp, 0xc]
sub.w r2, r3, 0x278
ldr r2, [r2, 0x10]
and r2, r2, 0xf000
cmp.w r2, 0x8000
beq 0x9f22
add r5, sb
adds r4, 1
cmp r4, sl
beq 0x9f9e
mov r0, r5
blx sym.imp.__snprintf_chk
mov r7, r0
b 0x9ec6
--
mov r1, r6
mov r0, r4
mov r4, r7
blx sym.imp.fileno
b 0x9d74
ldr r0, [sp, 0x14]
movs r4, 1
blx 0x2968
b 0x9d74
ldr r5, [0x0000a028]
movs r7, 1
mov sl, r7
str r4, [sp, 0x14]
add r5, pc
b 0x9eaa
mov.w r1, 0x1000
sub.w r0, sb, 4
blx sym.imp.accept
mov r5, r0
mov.w sl, 1
blx sym.imp.__snprintf_chk
mov r3, r0
movs r2, 0x2f
add r3, r5
strb r2, [r5, r0]
mov r0, r5
strb r4, [r3, 1]
blx sym.imp.__snprintf_chk
str r4, [sp, 0x14]
mov r7, r0
--
blx 0x2e78
subs r6, r0, 0
blt.w 0xa5bc
ldr r5, [r4, 0x10]
mov r0, r5
blx sym.imp.pthread_join
movs r1, 1
movs r2, 0
mov r0, r1
blx sym.imp.setmntent
subs r4, r0, 0
blt 0xa556
add r7, sp, 0x1c
movs r2, 0x6e
movs r1, 0
mov r0, r7
blx 0x2aec
mov.w r8, 1
mov r0, r5
strh.w r8, [sp, 0x1c]
blx sym.imp.__snprintf_chk
movs r3, 0x6c
mov r2, r0
--
ldr r3, [0x0000ad64]
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov r7, r0
add r2, pc
ldr r0, [0x0000ad68]
subw sp, sp, 0x83c
ldr r3, [r2, r3]
add r0, pc
ldr r3, [r3]
str.w r3, [sp, 0x834]
mov.w r3, 0
blx 0x2f98
cmp r0, 0
beq.w 0xac8a
mov r6, r0
movs r5, 0
add.w sb, sp, 0xc
str.w r5, [sb]
mov fp, r6
addw r8, sp, 0x814
blx sym.imp.__snprintf_chk
str r0, [sp, 4]
b 0xab98
--
cmp.w sl, 0x1f
bgt 0xab94
mov r2, sl
mov r1, fp
movs r3, 0x20
mov r0, r8
blx sym.imp.__memcpy_chk
addw r3, sl, 0x838
add.w r2, sp, r3
movs r3, 0
strb r3, [r2, -0x24]
blx sym.imp.if_nametoindex
ldr.w sl, [r0]
mov r3, r8
mov fp, r3
ldrb r1, [r3], 1
ldrh.w r1, [sl, r1, lsl 1]
lsls r0, r1, 0x12
bmi 0xabda
mov r0, fp
blx sym.imp.__snprintf_chk
subs r3, r0, 1
ldrb.w r1, [fp, r3]
--
cmp r6, 0x1f
bgt 0xac9e
addw r8, sp, 0x814
mov r2, r6
mov r1, fp
movs r3, 0x20
mov r0, r8
blx sym.imp.__memcpy_chk
addw r3, r6, 0x838
add.w r6, sp, r3
strb r4, [r6, -0x24]
blx sym.imp.if_nametoindex
ldr r6, [r0]
mov r3, r8
mov r4, r3
ldrb r2, [r3], 1
ldrh.w r2, [r6, r2, lsl 1]
lsls r0, r2, 0x12
bmi 0xacf4
mov r0, r4
blx sym.imp.__snprintf_chk
subs r3, r0, 1
ldrb r2, [r4, r3]
--
ldc2l p15, c15, [r3], 0x3fc
lsrs r4, r6
movs r1, r0
adds r5, 0x50
movs r0, r0
adds r4, 0xb2
movs r0, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov r4, r0
mov r6, r1
mov r0, r1
sub sp, 0x54
mov r5, r2
ldr.w r1, [0x0000b4f0]
ldr.w r3, [0x0000b4f4]
add r1, pc
ldr r3, [r1, r3]
ldr r3, [r3]
str r3, [sp, 0x4c]
mov.w r3, 0
blx sym.imp.__snprintf_chk
cmp r0, r5
bge.w 0xaf48
--
mov r0, r5
blx sym.imp.strtol
ldr r3, [r6]
str r0, [sp, 8]
cmp r3, 0x22
beq.w 0xb444
cmp r3, 0
bne.w 0xb44e
ldr r2, [sp, 8]
ldr r3, [sp, 0x24]
cmp r5, r3
it eq
moveq r2, -1
str r2, [sp, 8]
ldr.w r0, [0x0000b508]
add r0, pc
blx 0x2f98
str r0, [sp, 0x10]
cmp r0, 0
beq.w 0xb36c
blx sym.imp.__snprintf_chk
ldr.w r3, [0x0000b50c]
ldr.w sl, [0x0000b510]
--
cmp r4, 0x1f
bgt 0xaea8
mov r1, r5
add r5, sp, 0x2c
mov r2, r4
movs r3, 0x20
mov r0, r5
blx sym.imp.__memcpy_chk
add.w r3, r4, 0x50
add.w r2, sp, r3
movs r3, 0
strb r3, [r2, -0x24]
blx sym.imp.if_nametoindex
ldr r4, [r0]
mov fp, r5
ldrb r3, [r5], 1
ldrh.w r3, [r4, r3, lsl 1]
lsls r2, r3, 0x12
bmi 0xaee2
mov r0, fp
blx sym.imp.__snprintf_chk
subs r1, r0, 1
ldrb.w r5, [fp, r1]
--
str r3, [r0]
movs r2, 0xa
mov r1, r7
mov r0, sb
blx sym.imp.strtol
ldr.w r3, [r8]
cmp r3, 0x22
beq.w 0xb2ac
cmp r3, 0
bne.w 0xb2b6
ldr r3, [sp, 0x24]
cmp sb, r3
beq.w 0xb2bc
bic.w r0, r0, r0, asr 31
str r0, [r6, 8]
ldr.w r0, [0x0000b528]
add r0, pc
blx 0x2f98
mov r8, r0
cbz r0, 0xb03c
blx sym.imp.__snprintf_chk
cmp r0, 0x2e
mov r2, r0
--
eors r2, r3
mov.w r3, 0
beq.w 0xaf72
blx sym.imp.fork
blx sym.imp.fopen
b 0xb198
add.w r3, r0, -0x80000000
subs r3, 1
adds r3, 3
bhi 0xb23c
cmp r5, 0
bne 0xb15c
blx sym.imp.if_nametoindex
ldr.w r8, [r0]
mov r5, r6
ldrb r3, [r6], 1
ldrh.w r3, [r8, r3, lsl 1]
lsls r3, r3, 0x12
bmi 0xb244
mov r0, r5
blx sym.imp.__snprintf_chk
subs r3, r0, 1
ldrb r2, [r5, r3]
--
str r3, [sp, 8]
b 0xae78
mov r1, r5
add r5, sp, 0x2c
mov r2, sl
movs r3, 0x20
mov r0, r5
blx sym.imp.__memcpy_chk
add.w r3, sl, 0x50
add.w sl, sp, r3
strb r6, [sl, -0x24]
blx sym.imp.if_nametoindex
mov r3, r5
ldr r5, [r0]
mov r6, r3
ldrb r2, [r3], 1
ldrh.w r2, [r5, r2, lsl 1]
lsls r2, r2, 0x12
bmi 0xb480
mov r0, r6
blx sym.imp.__snprintf_chk
subs r2, r0, 1
ldrb r3, [r6, r2]
[*] Function printf used 41 times dbox
