[*] Binary protection state of sadf
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of sadf
cmp r7, r4
beq 0x3e56
adds r6, r5, 1
ldr r3, [r4, 4]!
beq 0x3d9a
ldr r2, [r3]
cmp r2, r5
bne 0x3d88
ldr r2, [r3, 4]
lsls r0, r2, 0x1e
bpl 0x3d88
ldr r1, [r3, 0x70]
cmp r1, 0
ble 0x3d88
lsls r1, r2, 0x1a
ldr r3, [r3, 0x48]
bpl 0x3d66
mov r1, r3
movw r2, 0x1ff
mov r0, r8
blx sym.imp.__printf_chk
movs r3, 0
ldr r1, [sp, 4]
--
str.w r2, [sl]
cmp.w sb, 0
bne 0x715e
ldr r3, [r5]
movs r7, 0
movs r2, 0x40
add.w r1, r5, 0x18
add.w r0, r4, 0x43
str r3, [r4]
ldr r3, [r5, 0xc]
str r7, [r4, 4]
str r3, [r4, 0x14]
ldrb r3, [r5, 0x16]
str r3, [r4, 0x18]
ldrb r3, [r5, 0x14]
strb.w r3, [r4, 0x40]
ldrb r3, [r5, 0x15]
strb.w r3, [r4, 0x41]
ldrb r3, [r5, 0x17]
strb.w r3, [r4, 0x42]
blx sym.imp.__printf_chk
movs r2, 0x40
add.w r1, r5, 0x59
add.w r0, r4, 0x84
strb.w r7, [r4, 0x83]
blx sym.imp.__printf_chk
movs r2, 0x40
add.w r1, r5, 0x9a
add.w r0, r4, 0xc5
strb.w r7, [r4, 0xc4]
blx sym.imp.__printf_chk
movs r2, 0x40
add.w r1, r5, 0xdb
add.w r0, r4, 0x106
strb.w r7, [r4, 0x105]
blx sym.imp.__printf_chk
strb.w r7, [r4, 0x146]
ldr r2, [sp, 4]
--
lsrs r2, r2, 5
str.w r2, [sl]
cmp.w sb, 0
bne 0x7168
ldr r3, [r5]
movs r7, 0
movs r2, 0x40
add.w r1, r5, 0x10
add.w r0, r4, 0x43
strd r3, r7, [r4]
ldr r3, [r5, 8]
str r3, [r4, 0x14]
ldrb r3, [r5, 0xe]
str r3, [r4, 0x18]
ldrb r3, [r5, 0xc]
strb.w r3, [r4, 0x40]
ldrb r3, [r5, 0xd]
strb.w r3, [r4, 0x41]
ldrb r3, [r5, 0xf]
strb.w r3, [r4, 0x42]
blx sym.imp.__printf_chk
movs r2, 0x40
add.w r1, r5, 0x51
add.w r0, r4, 0x84
strb.w r7, [r4, 0x83]
blx sym.imp.__printf_chk
movs r2, 0x40
add.w r1, r5, 0x92
add.w r0, r4, 0xc5
strb.w r7, [r4, 0xc4]
blx sym.imp.__printf_chk
movs r2, 0x40
add.w r1, r5, 0xd3
add.w r0, r4, 0x106
strb.w r7, [r4, 0x105]
blx sym.imp.__printf_chk
strb.w r7, [r4, 0x146]
b 0x7010
--
mla r4, r3, r6, r4
ldrd r0, r1, [r5]
ldrd sl, fp, [r5, 0x10]
adds r6, 1
ldr r3, [r5, 0x70]
strd r0, r1, [r4]
ldrd r0, r1, [r5, 0x20]
strd sl, fp, [r4, 8]
ldrd sl, fp, [r5, 0x30]
vldr d16, [r5, 0x50]
strd r0, r1, [r4, 0x10]
ldrd r0, r1, [r5, 0x40]
strd sl, fp, [r4, 0x18]
ldrd sl, fp, [r5, 0x60]
strd r0, r1, [r4, 0x20]
add.w r0, r4, 0x3c
str r3, [r4, 0x38]
add.w r1, r5, 0x74
vstr d16, [r4, 0x28]
strd sl, fp, [r4, 0x30]
blx sym.imp.__printf_chk
strb.w r7, [r4, 0x4b]
ldrb.w r3, [r5, 0x84]
--
mla r4, r2, r5, r4
ldrd r8, sb, [r3]
add.w r1, r3, 0x70
movs r2, 0xf
adds r5, 1
strd r8, sb, [r4]
add.w r0, r4, 0x3c
ldrd r8, sb, [r3, 0x10]
strd r8, sb, [r4, 8]
ldrd r8, sb, [r3, 0x20]
strd r8, sb, [r4, 0x10]
ldrd r8, sb, [r3, 0x30]
strd r8, sb, [r4, 0x18]
ldrd r8, sb, [r3, 0x40]
strd r8, sb, [r4, 0x20]
ldrd r8, sb, [r3, 0x50]
strd r8, sb, [r4, 0x28]
ldrd r8, sb, [r3, 0x60]
str r6, [r4, 0x38]
strd r8, sb, [r4, 0x30]
blx sym.imp.__printf_chk
strb.w r6, [r4, 0x4b]
strb.w r6, [r4, 0x4c]
--
ldr r3, [sp, 4]
mov r7, r6
str.w sb, [r4, 4]
str.w sl, [r4, 0x1c]
str r3, [r4, 0xc]
ldr r3, [sp, 8]
str.w lr, [r4, 0x24]
str r0, [r4, 0x2c]
str r3, [r4, 0x14]
str r6, [r4, 8]
str r6, [r4, 0x10]
str r6, [r4, 0x18]
str r6, [r4, 0x20]
str r6, [r4, 0x28]
add.w r0, r4, 0x3c
strd r7, ip, [r4, 0x30]
str.w fp, [r4, 0x38]
movs r2, 0xf
adds r1, 0x38
adds r5, 1
blx sym.imp.__printf_chk
ldr r3, [sp]
strb.w fp, [r4, 0x4b]
--
ldrd sl, fp, [r1]
adds r1, 0x90
vldr d16, [r1, -0x70]
adds r5, 1
strd r8, sb, [r4, 8]
add.w r0, r4, 0x48
ldrd r8, sb, [r1, -0x60]
strd sl, fp, [r4]
ldrd sl, fp, [r1, -0x50]
strd r8, sb, [r4, 0x18]
ldrd r8, sb, [r1, -0x40]
vstr d16, [r4, 0x10]
vldr d16, [r1, -0x30]
strd sl, fp, [r4, 0x20]
strd r8, sb, [r4, 0x28]
ldrd sl, fp, [r1, -0x20]
ldrd r8, sb, [r1, -0x10]
vstr d16, [r4, 0x30]
strd sl, fp, [r4, 0x38]
strd r8, sb, [r4, 0x40]
blx sym.imp.__printf_chk
strb.w r6, [r4, 0x57]
ldr r4, [r7]
--
ldr r3, [sp, 4]
str r0, [r4, 0x3c]
str r5, [r4, 8]
str r3, [r4, 0x14]
ldr r3, [sp, 8]
str r5, [r4, 0x10]
str r5, [r4, 0x18]
str r3, [r4, 0x1c]
ldr r3, [sp, 0xc]
str r5, [r4, 0x20]
str r5, [r4, 0x28]
str r3, [r4, 0x24]
ldr r3, [sp, 0x10]
str r5, [r4, 0x30]
str r5, [r4, 0x38]
str r3, [r4, 0x2c]
add.w r0, r4, 0x48
strd r7, ip, [r4, 0x40]
movs r2, 0xf
adds r1, 0x48
blx sym.imp.__printf_chk
strb.w r8, [r4, 0x57]
add.w sb, sb, 1
--
ble 0x83ea
ldr.w r0, [r3, 0x90]
movs r2, 0x7f
ldr.w r5, [r3, 0x98]
ldr.w r1, [r3, 0x8c]
ldr.w r4, [r3, 0x9c]
mla r5, r0, r6, r5
mla r4, r1, r6, r4
vldr d17, [r5]
vldr d16, [r5, 0x20]
add.w r1, r5, 0x50
vldr d18, [r5, 0x10]
vstr d17, [r4]
add.w r0, r4, 0x28
vldr d17, [r5, 0x30]
vstr d16, [r4, 0x10]
vldr d16, [r5, 0x40]
vstr d18, [r4, 8]
vstr d17, [r4, 0x18]
vstr d16, [r4, 0x20]
blx sym.imp.__printf_chk
cmp.w sb, 0xa0
strb.w r7, [r4, 0xa7]
it le
strble r7, [r4, 0xa8]
ble 0x8362
add.w r1, r5, 0xd0
movs r2, 0x7f
add.w r0, r4, 0xa8
adds r6, 1
blx sym.imp.__printf_chk
strb.w r7, [r4, 0x127]
ldr.w r3, [r8]
--
str r2, [sp, 0x60]
str r3, [sp, 0x64]
adds r3, r6, 4
str r3, [sp, 0x80]
add.w r3, r6, 8
str r3, [sp, 0x84]
add.w r3, r6, 0xc
str r3, [sp, 0x88]
add.w r3, r6, 0x10
str r3, [sp, 0x8c]
add.w r3, r6, 0x14
str r3, [sp, 0x90]
add.w r3, r6, 0x18
str r3, [sp, 0x94]
add.w r3, r6, 0x1c
str r3, [sp, 0x98]
b 0x1c9f8
mov r1, sl
mov.w r2, 0x1000
mov r0, r7
blx sym.imp.__printf_chk
strb.w r5, [r7, 0xfff]
b 0x1ca1a
--
add r2, r4
ldrd r4, r5, [r8]
strd r4, r5, [sp]
bl 0x18688
b 0x1d33c
movs r3, 0
b 0x1d898
adds r3, 1
add.w sb, sb, 0x24
cmp r3, r5
beq.w 0x1d33c
ldr.w r2, [sb, 0x20]
ldrb r2, [r2]
cmp r2, 0
bne 0x1d88c
add.w r3, r3, r3, lsl 3
b 0x1d3ec
mov.w r2, 0x1000
add.w r1, r4, 0x3c
mov r0, r3
blx sym.imp.__printf_chk
strb.w r6, [r0, 0xfff]
b 0x1d48e
--
mov r1, r4
mov r0, sb
strb.w r7, [sp, 0x1e3]
bl 0x18524
b 0x1db46
movs r3, 0
b 0x1e104
adds r3, 1
adds r7, 0x28
cmp r3, r5
beq.w 0x1db46
ldr r2, [r7, 0x24]
ldrb r2, [r2]
cmp r2, 0
bne 0x1e0fa
add.w r3, r3, r3, lsl 2
b 0x1dc00
mov.w r2, 0x1000
add.w r1, r4, 0x48
mov r0, r3
blx sym.imp.__printf_chk
strb.w r6, [r0, 0xfff]
b 0x1dca0
--
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
movs r6, 0
b 0x253b0
adds r6, 1
add.w sl, sl, 0x24
cmp r5, r6
beq.w 0x24bee
ldr.w r3, [sl, 0x1c]
ldrb r3, [r3]
cmp r3, 0
bne 0x253a4
b 0x24ca6
ldr.w r0, [sl, 0x210]
adds r7, 1
ldr r2, [r6, 0x44]
b 0x2529e
mov.w r2, 0x1000
add.w r1, r4, 0x28
mov r0, r3
adds r6, 8
blx sym.imp.__printf_chk
ldr r3, [sp, 0x44]
mov.w r2, 0x1000
strb.w r5, [r0, 0xfff]
add.w r1, r4, 0xa8
ldr.w r3, [r3, r6, lsl 2]
mov r0, r3
blx sym.imp.__printf_chk
strb.w r5, [r0, 0xfff]
b 0x24d0c
--
adds r6, 1
cmp r7, r6
it le
movle r6, 0
cmp r8, r6
beq 0x25a46
mla sl, r6, r4, r5
mov r0, sb
add.w r1, sl, 0x20
blx sym.imp.strcmp
cmp r0, 0
bne 0x25a00
mov r4, sl
ldr r6, [sp, 0x74]
ldr.w sl, [sp, 0x90]
b 0x25728
ldr r1, [sp, 0x30]
mov r0, r3
mov.w r2, 0x1000
adds r1, 0x20
blx sym.imp.__printf_chk
ldr r3, [0x00025ab0]
strb.w r5, [r0, 0xfff]
--
movs r7, 0
mov r5, r0
ldr r3, [0x000273cc]
add r4, sp, 4
add r1, pc
mov.w r2, 0x1fc
add r0, sp, 8
ldr r3, [r1, r3]
mov r1, r7
ldr r3, [r3]
str r3, [sp, 0x204]
mov.w r3, 0
str r7, [r4]
blx 0x2b58
cmp r5, 0
beq 0x273aa
mov r1, r5
movw r2, 0x1ff
mov r0, r4
ldr r5, [0x000273d0]
blx sym.imp.__printf_chk
ldr r3, [0x000273d4]
mov r0, r4
--
bgt 0x27312
cmp r4, 0
beq 0x273b8
movs r1, 0x26
mov r0, r4
blx 0x2b18
mov r5, r0
cbz r0, 0x27346
ldr r1, [0x000273d8]
mov r0, r4
add r1, pc
blx sym.imp.strcspn
mov r5, r0
movs r3, 0x3b
strb r3, [r4, r0]
ldr r3, [0x000273dc]
mov.w r2, 0x200
mov r1, r4
add r3, pc
mov r0, r3
blx sym.imp.__printf_chk
movs r2, 0
mov r6, r0
--
mov r7, r1
ldr r2, [0x0002de54]
movs r1, 0
ldr r3, [0x0002de58]
mov r0, r5
add.w r8, sp, 0x1c
add r6, sp, 0x4c
add r2, pc
ldr r3, [r2, r3]
movs r2, 0x2c
ldr r3, [r3]
str r3, [sp, 0x24c]
mov.w r3, 0
blx 0x2b58
ldrb r3, [r4]
cmp r3, 0
beq 0x2de14
mov.w r2, 0x200
mov r1, r4
mov r0, r6
blx sym.imp.__printf_chk
movs r3, 0
mov r1, r7
--
movlo r0, 0
add r3, pc
it hs
movhs r0, 1
str r2, [r3]
ldr r2, [0x0002de64]
ldr r3, [0x0002de58]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x24c]
eors r2, r3
mov.w r3, 0
bne 0x2de50
add.w sp, sp, 0x250
pop.w {r4, r5, r6, r7, r8, pc}
ldr r1, [0x0002de68]
mov.w r2, 0x200
mov r0, r6
add r1, pc
blx sym.imp.__printf_chk
b 0x2dd9a
ldr r0, [0x0002de6c]
--
add r5, pc
ldr r1, [r5, r1]
mov r5, r2
ldr r1, [r1]
str r1, [sp, 0xc]
mov.w r1, 0
str r3, [r4]
cmp.w r8, 0
beq 0x2e430
mov r0, r8
blx 0x2b0c
cmp r0, 5
mov r2, r0
beq 0x2e478
cmp r0, 8
beq 0x2e466
mov r3, sp
movs r2, 8
mov r0, r3
mov r1, r7
blx sym.imp.__printf_chk
mov r3, r0
movs r2, 0
mov r0, r3
mov r1, r5
strb.w r2, [sp, 8]
bl 0x2e380
ldr r2, [0x0002e4ac]
ldr r3, [0x0002e4a8]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x2e49e
add sp, 0x10
pop.w {r4, r5, r6, r7, r8, pc}
mov r3, sp
adds r6, 2
mov r0, r3
mov r1, r8
str r6, [r4]
blx sym.imp.__printf_chk
mov r3, r0
b 0x2e43e
mov r3, sp
adds r6, 2
mov r1, r8
mov r0, r3
str r6, [r4]
blx sym.imp.__printf_chk
ldr r1, [0x0002e4b0]
mov r3, r0
--
cmp r0, r3
beq 0x2fd0c
ldr r1, [r3, 4]!
ldr r2, [r1]
cmp r2, 4
bne 0x2fc94
b 0x2f9a6
ldr.w r3, [fp]
orr r3, r3, 4
str.w r3, [fp]
ldr.w r3, [r6, r4, lsl 2]
b 0x2f982
adds r5, 1
b 0x2f8be
ldr r3, [0x0002fe84]
mov r1, r5
movw r2, 0x1ff
movs r5, 0
ldr.w r4, [r8, r3]
mov r0, r4
blx sym.imp.__printf_chk
mov r0, r4
strb.w r5, [r4, 0x1ff]
--
mov r4, r0
cmp r0, 0
beq 0x3293e
ldr r1, [0x00032960]
mov r2, r8
adds r0, 5
add r1, pc
blx 0x2b48
cbz r0, 0x32944
subs r4, r4, r6
subs r4, 6
subs r4, 0x10
bics r4, r4, 0x10
bne 0x32944
ldr.w r8, [0x00032964]
mov r3, sp
movs r2, 0x10
adds r1, r6, 6
mov r0, r3
add r8, pc
blx sym.imp.__printf_chk
mov r2, r7
mov r1, r8
--
mov r0, fp
strb r5, [sl, -0x4]
blx sym.imp.strtod
cmp r0, 0
beq 0x329ae
ldrb r3, [r0]
cmp r3, 0
beq 0x329ae
ldr r1, [sp, 0x14]
mov.w r2, 0x1000
blx sym.imp.close
mov r5, r0
cmp r0, 0
bne 0x329ae
mov r1, r4
add.w r4, sp, 0x2000
adds r4, 0x28
mov.w r2, 0x100
subs r3, r4, 4
mov r0, r3
blx sym.imp.__printf_chk
ldrd r1, r2, [sp, 0x18]
strb.w r5, [r4, 0xffb]
--
blx sym.imp.puts
cbz r0, 0x32d90
ldr r1, [0x00032da0]
add r1, pc
blx sym.imp.strcmp
cbnz r0, 0x32d8a
movs r3, 1
str r3, [r7]
ldr r2, [0x00032da4]
mov r3, r4
mov r1, r5
mov r0, r6
add r2, pc
blx 0x2ab8
movs r0, 1
pop {r3, r4, r5, r6, r7, pc}
ldr r1, [0x00032da8]
mov r0, r6
add r5, r6
add r1, pc
blx sym.imp.__printf_chk
mov r0, r4
strb r4, [r5, -0x1]
--
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x32f18
add sp, 0x14
ldr pc, [sp], 4
mov.w r0, 0x5180
movt r0, 1
b 0x32ef4
blx 0x29f0
itt ls
movls r1, r0
lslls r4, r0, 5
movs r0, r0
ite vc
movvc r1, r0
pushvs {r3, r4, r5, r6, r7, lr}
movs r1, 0
mov r4, r0
blx sym.imp.__snprintf_chk
cbz r0, 0x32f7c
ldr r1, [0x00032f80]
mov r6, r0
movs r2, 5
add r1, pc
blx sym.imp.close
adds r1, r6, 5
cbnz r0, 0x32f78
ldr r7, [0x00032f84]
mov.w r2, 0x200
movs r5, 0x21
add r7, pc
addw r4, r7, 0x80c
mov r0, r4
blx sym.imp.__printf_chk
movs r3, 0
strb.w r3, [r7, 0xa0b]
--
add.w r1, sp, 0x1000
ldr r3, [0x0003334c]
adds r1, 4
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
mov.w r3, 0
bne 0x33344
add.w sp, sp, 0x1000
add sp, 0xc
pop.w {r4, r5, r6, r7, r8, sb, pc}
movs r0, 0
b 0x33306
ldr r3, [0x0003335c]
mov.w r2, 0x1000
ldr r1, [r4]
add r3, pc
mov r0, r3
blx sym.imp.__printf_chk
strb.w sb, [r0, 0xfff]
b 0x332e6
--
movs r3, 0x40
ldr r2, [0x0003361c]
mov r1, r3
vldr d16, [r5]
add r0, pc
strd r4, r6, [sp, 0x10]
add r2, pc
addw r0, r0, 0xd2c
str r2, [sp]
movs r2, 1
vstr d16, [sp, 8]
mov r4, r0
blx 0x2c7c
ldr r6, [0x00033620]
mov r1, r4
movs r2, 0x7f
movs r5, 0x2f
add r6, pc
add.w r4, r6, 0xd70
mov r0, r4
blx sym.imp.__printf_chk
movs r3, 0
strb.w r3, [r6, 0xdef]
--
add r5, pc
b 0x33f6c
ldrb.w r3, [r8]
mov r1, r5
movs r0, 0
orr r3, r3, 1
strb.w r3, [r8]
blx 0x2bf0
mov sb, r0
cmp r0, 0
beq 0x34004
mov r1, r4
mov r0, sb
blx sym.imp.strcmp
cmp r0, 0
beq 0x33f52
movs r2, 0xf
mov r1, sb
mov r0, r6
mov.w fp, 0
blx sym.imp.__printf_chk
movs r1, 0x2d
mov r0, r6
--
add r5, pc
mov r1, r5
ldr r3, [r3]
str r3, [sp, 0x1f4]
mov.w r3, 0
ldr.w r3, [0x00034628]
add r4, pc
mov r0, r4
add r3, pc
str r3, [sp, 0x30]
blx sym.imp.fopen
str r0, [sp, 0x24]
cmp r0, 0
beq.w 0x345fc
add r3, sp, 0xb4
mov r1, r4
movs r2, 0x3f
mov r0, r3
str r3, [sp, 0x28]
add r7, sp, 0xf4
blx sym.imp.__printf_chk
ldr.w r0, [0x0003462c]
movs r1, 0
--
movs r1, 1
ldr r0, [r3]
add r2, pc
ldr r3, [sp, 0x28]
blx 0x2bc0
b 0x341dc
ldr r1, [sp, 0x30]
ldr r2, [0x00034664]
ldr r2, [r1, r2]
movs r1, 1
str r3, [sp]
ldr r3, [0x00034680]
ldr r0, [r2]
ldr r2, [0x00034684]
add r3, pc
add r2, pc
blx 0x2bc0
b 0x341dc
movs r2, 0x20
mov r1, r5
blx sym.imp.__printf_chk
ldr r3, [sp, 0x2c]
strb.w fp, [r5, 0x52]
--
cmp r3, 0x61
bne.w 0x342dc
ldr r3, [0x00034688]
ldr r2, [0x0003468c]
add r3, pc
add r2, pc
str.w r2, [r5, 0xc4]
ldrh r2, [r3]
ldrb r3, [r3, 2]
strh.w r2, [r5, 0x53]
strb.w r3, [r5, 0x55]
b 0x342e8
ldr.w r0, [ip, 0x10]
adds r0, 0x84
str r0, [r4, 0xc]
b 0x34422
add.w r3, r5, 0x53
movs r2, 0xf
mov r0, r3
add.w r1, sp, 0x55
blx sym.imp.__printf_chk
mov r3, r0
mov r0, r3
ldr r3, [0x00034690]
ldr r1, [0x00034694]
movs r2, 0x10
add r3, pc
add r1, pc
str.w r3, [r5, 0xc4]
blx 0x2b30
b 0x342e8
add.w r3, r5, 0x53
b 0x3458a
ldr r3, [r4, 4]
movs r2, 0x20
mov r1, r5
add.w r0, r6, 0xc8
str.w r3, [r6, 0xec]
blx sym.imp.__printf_chk
movs r3, 1
strb.w r8, [r6, 0xe7]
--
add r5, r4
mov r0, r6
ldr.w r1, [r2, 0x80]
add.w r6, r2, 0x63
bl 0x34bbc
mov r3, r6
str r1, [sp]
mov.w r2, -1
mov r0, r5
movs r1, 1
blx 0x2b3c
mov r0, r4
add sp, 8
pop.w {r4, r5, r6, r7, r8, sb, sl, pc}
ldr r5, [0x00034824]
add.w r1, r4, 0xc8
movs r2, 0x2f
add r5, pc
sub.w r4, r5, 0xe0
mov r0, r4
blx sym.imp.__printf_chk
movs r3, 0
strb r3, [r5, -0xb1]
--
ubfx r5, r3, 8, 0xc
uxtb r1, r3
lsrs r3, r3, 0xc
orr.w r3, r3, r2, lsl 20
and.w r2, r2, fp
orrs r2, r5
bic r3, r3, 0xff
orrs r3, r1
ldr r1, [sp, 0x14]
cmp r3, sl
it eq
cmpeq r2, r1
bne 0x3486c
ldr r6, [0x00034950]
mov r1, r4
mov r5, r0
movs r2, 0x7f
add r6, pc
sub.w r4, r6, 0xb0
mov r0, r4
blx sym.imp.__printf_chk
strb r5, [r6, -0x31]
b 0x348e6
[*] Function printf used 44 times sadf
