[*] Binary protection state of libkmod.so.2.3.7
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function mmap tear down of libkmod.so.2.3.7
blx sym.imp.mmap64
cmp r8, r5
bhs 0x3992
mov r3, r6
subs r1, r5, 1
movs r0, 0x20
ldrb r2, [r3, 1]!
cbnz r2, 0x39d6
strb r0, [r3]
cmp r3, r1
bne 0x39ce
subs r5, r5, r7
subs r5, 5
add r8, r5
cmp r4, 0
beq 0x3994
ldr r3, [0x00003a34]
add.w r5, r8, 6
adds r2, r4, 1
add r4, r5
add r3, pc
--
blx sym.imp.mmap64
cmp r4, r5
bls 0x3a2c
add.w r3, r8, 5
subs r1, r4, 1
movs r0, 0x20
ldrb r2, [r3, 1]!
cbnz r2, 0x3a1c
strb r0, [r3]
cmp r1, r3
bne 0x3a14
sub.w r4, r4, r8
subs r4, 6
add.w r8, r5, r4
b 0x3994
mov r8, r5
b 0x3994
strb r4, [r4, 0x14]
movs r0, r0
strb r2, [r5, 0x13]
movs r0, r0
--
blx sym.imp.mmap64
str.w r8, [sl]
strb.w sb, [sl, 4]
mov r1, sl
mov r0, r6
bl 0x37c0
mov r3, r0
cmp r0, 0
beq 0x3b1e
movs r0, 0
str r3, [r7]
add sp, 8
pop.w {r4, r5, r6, r7, r8, sb, sl, pc}
mvn r0, 0x10
cmp r3, 0
beq 0x3a7e
mov r0, r5
blx 0x22a8
mov r2, r0
adds r0, 9
str r2, [sp, 4]
--
blx sym.imp.mmap64
str.w r8, [sl]
strb.w sb, [sl, 4]
cmp r4, 0
beq 0x3aa6
cmp r6, r4
mov r1, sl
mov r0, r4
beq 0x3b14
bl 0x37e8
mov r3, r0
cbz r3, 0x3b1e
ldr r2, [r7]
cmp r4, r2
it ne
movne r0, 0
beq 0x3ab4
add sp, 8
pop.w {r4, r5, r6, r7, r8, sb, sl, pc}
bl 0x3838
mov r3, r0
--
blx sym.imp.mmap64
mov r1, r6
mov r2, r7
mov r0, r4
blx sym.imp.mmap64
ldr.w r0, [r8]
mov r1, r5
bl 0x37c0
cbz r0, 0x3b7e
movs r5, 0
str.w r0, [r8]
mov r0, r5
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
b.w 0x20a0
push.w {r4, r5, r6, r7, r8, sb, sl, lr}
mov r6, r2
mov r8, r0
mov r0, r1
mov sb, r1
blx 0x22a8
add.w sl, r0, 1
mov r4, r0
mov r0, r6
blx 0x22a8
adds r7, r0, 1
--
blx sym.imp.mmap64
mov r2, r7
mov r1, r6
mov r0, r4
blx sym.imp.mmap64
movs r1, 9
ldr r0, [r5]
movs r2, 0x20
bl 0xa564
ldr.w r0, [r8, 0xc]
mov r1, r5
bl 0x37c0
cbz r0, 0x3bea
movs r5, 0
str.w r0, [r8, 0xc]
mov r0, r5
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
b.w 0x20a0
ldr r0, [r0, 8]
adds r0, 4
bx lr
nop
ldr r0, [r0, 8]
adds r0, 4
bx lr
--
blx sym.imp.mmap64
ldr r0, [sp, 0x18]
mov r1, r4
bl 0x37c0
cmp r0, 0
beq.w 0x43ba
ldr r5, [sb, 4]!
str r0, [sp, 0x18]
cmp r5, 0
bne 0x3d50
ldr r7, [sp, 0x18]
movs r1, 0x20
movs r0, 1
blx sym.imp.calloc
ldr r2, [sp, 0x30]
str r0, [sp, 0x24]
str r0, [r2]
ldr r2, [fp, -0xdc]
str r2, [sp, 0x10]
cmp r0, 0
beq.w 0x43c2
--
blx sym.imp.mmap64
mov r1, r6
ldr r2, [sp, 0x28]
mov r0, r8
blx sym.imp.mmap64
ldr r3, [sp, 0x2c]
ldr r6, [sp, 0x24]
mov r1, r3
str r3, [sp, 0x28]
ldr r0, [r6, 4]
bl 0x37c0
ldr r3, [sp, 0x28]
cbz r0, 0x3f86
mov r3, r5
str r0, [r6, 4]
mov r0, r3
blx 0x20a4
b 0x3ec8
mov r0, r5
blx 0x21b4
mov r6, r0
cmp r0, 0
beq.w 0x3d48
blx 0x23dc
cbz r0, 0x401a
--
blx sym.imp.mmap64
ldr r3, [r6]
mov r2, r8
mov.w r8, 0
str.w r8, [sp, 0x2c]
add r2, r3
strd r8, r8, [sp, 0x40]
str r2, [sp, 0x34]
mov r2, r5
ldrb r6, [r5], 1
cbz r6, 0x4548
str r2, [sp, 0x28]
blx 0x226c
ldr r3, [r0]
ldrh.w r3, [r3, r6, lsl 1]
ands r3, r3, 0x2000
beq.w 0x464c
ldr r2, [sp, 0x28]
cmp.w r8, 0
bne.w 0x4650
cmp r2, r7
--
blx sym.imp.mmap64
ldr r2, [sp, 0x28]
ldr r3, [sp, 0x48]
strb r3, [r6, r2]
adds r2, 1
adds r3, r6, r2
str r3, [sp, 0x34]
ldrb r6, [r5, -0x1]
b 0x456e
str r3, [sp, 0x48]
mov r1, r7
ldr r3, [sp, 0x30]
ldr r6, [sp, 0x34]
ldr r0, [r3, 8]
ldr r3, [sp, 0x44]
str.w r6, [r0, r3, lsl 2]
adds r3, 1
str r3, [sp, 0x44]
b 0x4680
rsbs r0, r6, 0
blx 0x2208
--
blx sym.imp.mmap64
cmp r7, 0
ble 0x49f6
add.w r8, r4, r8, lsl 2
ldr r3, [r5], 4
adds r4, 0xc
rev r3, r3
mov r0, r5
str r3, [r4, -0xc]
blx 0x22a8
cmp r8, r4
add.w r3, r0, 1
str r5, [r4, -0x4]
add r5, r3
str r0, [r4, -0x8]
bne 0x49d2
ldr r2, [0x00004a7c]
ldr r3, [0x00004a74]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
--
blx sym.imp.mmap64
b 0x49f6
movs r6, 0
b 0x49f6
mov r5, r7
b 0x4984
blx 0x2108
strb r4, [r5, 0x14]
movs r1, r0
lsls r4, r4, 6
movs r0, r0
str r6, [r5, 0x64]
movs r0, r0
strb r6, [r1, 0x11]
movs r1, r0
push.w {r3, r4, r5, r6, r7, r8, sb, lr}
mov r5, r0
ldr r4, [r0]
mov sb, r1
mov r8, r2
mov r6, r3
--
blx sym.imp.mmap64
add r8, r7
movs r3, 0
strb.w r3, [r8, 0xc]
str r7, [r5]
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
nop
push {r3, r4, r5, r6, r7, lr}
mov r6, r0
mov r4, r1
movs r7, 0
blx sym.imp.gzerror
mov r5, r0
b 0x4ae8
uxtb r1, r3
mov r0, r6
cbz r3, 0x4b0c
bl 0xa404
cbz r0, 0x4b0c
ldrd r3, r2, [r4, 4]
str r7, [r5]
--
blx sym.imp.mmap64
mov r0, r4
mov r1, r8
ldr r3, [r0], 4
mov.w r8, 0
mov r2, r5
add r5, r4
strb.w r8, [r3, r6]
blx sym.imp.mmap64
strb.w r8, [r5, 4]
mov r1, r4
ldr r0, [r7]
bl 0x37c0
mov r5, r0
cbz r0, 0x5954
str r0, [r7]
mov r0, r5
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
mov r0, r4
blx 0x20a4
mov r0, r5
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
mov r5, r0
b 0x594e
push {r4, r5, r6, lr}
mov r5, r0
ldr r0, [r0]
bl 0x31dc
ldr r6, [r0, 8]
--
blx sym.imp.mmap64
strb r6, [r0, r5]
adds r5, 1
ldr r0, [r4, 8]
mov r1, sb
mov r2, r8
add r5, r0
add r0, r8
str r5, [r4, 0x20]
str r0, [r4, 4]
blx sym.imp.mmap64
ldr r5, [r4, 4]
movs r3, 1
mov r0, r7
str r3, [r4, 0x2c]
mov r2, r5
mov r1, r4
bl 0x29ec
ldr r3, [sp, 0x24]
movs r0, 0
str r4, [r3]
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
blx sym.imp.__errno_location
ldr r2, [sp, 0x24]
mov r3, r0
movs r0, 0
str r3, [r2]
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
add.w r0, r5, 0x3d
adds r6, r5, 1
blx 0x21fc
--
blx sym.imp.mmap64
str r5, [r4, 4]
str.w r8, [r4, 0x20]
b 0x5c84
mvn r0, 0xb
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
nop
push.w {r4, r5, r6, r7, r8, sb, sl, lr}
cmp r2, 0
it ne
cmpne r1, 0
mov r4, r1
ldr r1, [0x00005e20]
mov r7, r2
sub.w sp, sp, 0x1080
ldr r2, [0x00005e24]
it eq
moveq r3, 1
add r1, pc
it ne
movne r3, 0
--
blx sym.imp.mmap64
mov r2, r4
movs r4, 0x5c
strd r6, sb, [sp]
mov r3, r5
mov r1, sl
mov r0, r8
strb r4, [r7, -0x4]
bl 0x5c18
and.w r0, r0, r0, asr 31
ldr r2, [0x00005ee0]
add.w r1, sp, 0x1000
ldr r3, [0x00005edc]
adds r1, 0xc
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
mov.w r3, 0
bne 0x5ed4
--
blx sym.imp.mmap64
ldr r6, [sp, 4]
mov r1, r6
sub.w r2, r7, 8
mov r0, sb
blx sym.imp.munmap
subs r4, r0, 0
blt 0x6112
ldr r1, [r7, -0x8]
mov r0, r5
bl 0x3838
mov r2, sl
mov r5, r0
mov r1, fp
movs r0, 0
blx 0x21a8
add.w r8, r8, 1
mov r6, r0
cmp r0, 0
beq 0x611c
movs r3, 0
--
blx sym.imp.mmap64
mov r0, r4
blx sym.imp.__stack_chk_fail
str r0, [r6, 0xc]
cmp r0, 0
bne.w 0x6038
b 0x610e
mov r5, r0
mov r8, r0
b 0x611e
blx 0x2108
ldr r3, [0x00006178]
movs r2, 0x95
ldr r1, [0x0000617c]
ldr r0, [0x00006180]
add r3, pc
add r1, pc
add r0, pc
blx 0x246c
nop
ldrsh r4, [r4, r2]
--
blx sym.imp.mmap64
mov.w r3, 0
strb.w r3, [fp, r6]
ldr r4, [r4]
ldr.w r3, [r8, 0xc]
cmp r4, r3
bne 0x662a
ldrb.w r3, [r5, 0x30]
mov r0, sb
str.w sb, [r5, 0x14]
orr r3, r3, 2
strb.w r3, [r5, 0x30]
pop.w {r3, r4, r5, r6, r7, r8, sb, sl, fp, pc}
mov r6, sl
b 0x6674
mov sb, r0
b 0x6618
mov r0, sb
mov sb, fp
blx 0x20a4
b 0x6618
--
blx sym.imp.mmap64
movs r3, 0x20
add.w r0, sb, 1
adds r4, r0, r6
strb.w r3, [sl, sb]
cmp.w r8, 0
bne.w 0x6dfe
mov.w r3, 0
strb.w r3, [sl, r4]
cmp r7, 0
beq 0x6d92
ldrb.w r3, [fp, 0x38]
lsls r1, r3, 0x1e
bmi 0x6d92
ldr r3, [sp, 0x18]
cbz r3, 0x6d14
cmp.w sl, 0
beq.w 0x6ffe
mov r2, sl
ldr r3, [sp, 0x18]
movs r1, 1
--
blx sym.imp.mmap64
b 0x6cea
mov r0, fp
blx 0x2004
cmp r0, 1
bhi.w 0x6c9e
ldr r3, [sp, 0xc]
cmp r3, fp
beq 0x6dd4
b 0x6d2e
cmp r4, 0
beq 0x6de0
mov r0, r4
blx 0x22a8
ldr r3, [sp, 0x1c]
mov sb, r0
cmp r3, 0
beq.w 0x6cb4
ldr r0, [sp, 0x1c]
blx 0x22a8
orrs.w r3, sb, r0
--
blx sym.imp.mmap64
ldr r1, [sp, 0x14]
mov r2, sl
adds r0, r4, r6
blx sym.imp.mmap64
add.w r0, sl, r6
mov r2, r8
mov r1, r5
add r0, r4
blx sym.imp.mmap64
mov r0, sb
mov.w r3, 0
mov sb, r4
strb r3, [r4, r7]
blx 0x20a4
mov r1, fp
mov r0, sb
blx sym.imp.strstr
cmp r0, 0
bne 0x6ee6
ldr r3, [sp, 0x28]
ldrd fp, sl, [sp, 0x30]
cmp r3, 0
beq 0x6fc6
ldr r2, [sp, 0x2c]
mov r1, sb
mov r0, fp
blx r3
ldr r3, [sp, 0x38]
cmn.w r0, 0x11
--
blx sym.imp.mmap64
mov r1, fp
mov r0, r5
bl 0x37c0
cbz r0, 0x7538
mov r5, r0
mov r0, r6
blx 0x23dc
cmp r0, 0
bne 0x7494
mov r0, r6
blx 0x2454
ldr r2, [0x00007570]
add.w r1, sp, 0x1000
ldr r3, [0x00007568]
adds r1, 0xc
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r1]
eors r2, r3
--
blx sym.imp.mmap64
ldr r0, [r7]
mov r1, r5
bl 0x37c0
mov r4, r0
cmp r0, 0
bne 0x7876
mov r0, r5
mvn r8, 0xb
blx 0x20a4
ldr r0, [r7]
blx 0x2278
str r4, [r7]
b 0x7854
blx sym.imp.gzerror
ldr r3, [r0]
rsb.w r8, r3, 0
b 0x785a
blx sym.imp.gzerror
ldr r3, [r0]
ldr r0, [r7]
--
blx sym.imp.mmap64
ldr r0, [r7]
mov r1, r5
bl 0x37c0
mov r4, r0
cmp r0, 0
bne 0x79be
mov r0, r5
mvn r8, 0xb
blx 0x20a4
ldr r0, [r7]
blx sym.imp.memchr
str r4, [r7]
b 0x799c
blx sym.imp.gzerror
ldr r3, [r0]
rsb.w r8, r3, 0
b 0x79a2
blx sym.imp.gzerror
ldr r3, [r0]
ldr r0, [r7]
--
blx sym.imp.mmap64
ldr r0, [r7]
mov r1, r4
bl 0x37c0
mov r5, r0
cmp r0, 0
bne 0x7b1a
mov r0, r4
mvn r8, 0xb
blx 0x20a4
ldr r0, [r7]
blx 0x219c
str r5, [r7]
b 0x7af4
blx sym.imp.gzerror
ldr r3, [r0]
rsb.w r8, r3, 0
b 0x7afa
blx sym.imp.gzerror
ldr r3, [r0]
ldr r0, [r7]
--
blx sym.imp.mmap64
cmp r7, 1
mov.w r2, 0
it hi
movhi ip, 1
strb.w r2, [r8, r4]
it hi
subhi r0, ip, r6
str r2, [r8, -0x4]
it hi
movhi lr, r2
str.w r8, [sb]
bhi 0x86e8
b 0x8722
cmp ip, r7
add.w r2, r2, 1
bhs 0x8722
cmp r2, r4
sbcs.w r3, lr, r5
bhs 0x8722
ldrb.w r3, [r8, r2]
--
blx sym.imp.mmap64
ldr r3, [sp, 0x10]
add.w sb, sb, 0x40
add.w r2, fp, 1
cmp fp, r3
beq 0x88da
mov fp, r2
b 0x8852
ldr r3, [sp, 0x14]
ldr r1, [0x00008970]
ldr r2, [0x00008968]
add r1, pc
ldr r2, [r1, r2]
ldr r1, [r2]
ldr r2, [sp, 0x2c]
eors r1, r2
mov.w r2, 0
bne 0x8956
mov r0, r3
add sp, 0x34
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
--
blx sym.imp.mmap64
ldr r3, [sp, 0xc]
add.w r2, sb, r7
str.w sb, [r4]
b 0x8afe
mov r0, fp
str r3, [sp, 0xc]
blx 0x21fc
ldr r3, [sp, 0xc]
mov sb, r0
str r0, [r4, 4]
cbz r0, 0x8b70
ldr r1, [sp, 0x10]
mov r2, fp
str r3, [sp, 0xc]
blx sym.imp.mmap64
ldr r3, [sp, 0xc]
add.w r1, sb, r7
str.w sb, [r4]
b 0x8a8a
bl 0x7ed8
bl 0x7ef8
blx 0x2108
bl 0x7f18
blx sym.imp.gzerror
ldr r3, [r0]
rsbs r3, r3, 0
b 0x8aa0
nop
adds r4, 0xb2
movs r1, r0
lsls r4, r4, 6
movs r0, r0
adds r3, 0xa4
movs r1, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
--
blx sym.imp.mmap64
str r4, [r7]
ldr r3, [sp, 4]
ldr r4, [r7, 4]
b 0x8c4c
mov r3, r8
mov r2, sb
b 0x8c10
mov r0, sl
blx 0x22a8
adds.w r3, r0, r8
adc r2, sb, 0
b 0x8c66
blx 0x2108
blx sym.imp.gzerror
ldr r3, [r0]
rsbs r3, r3, 0
b 0x8be0
nop
adds r2, 0xb0
movs r1, r0
--
blx sym.imp.mmap64
ldr r2, [sp, 0x10]
mov r3, r0
mov r1, sb
mov ip, r8
strb r5, [r0, r2]
adds r2, 1
add r3, r2
ldrd r0, r2, [sp, 8]
cmp r8, r2
it eq
cmpeq sb, r0
beq 0x9020
ldrb.w r5, [r6, sl]
adds.w sb, sl, 1
adc r8, r7, 0
mov r2, sl
mov r0, r7
mov sl, sb
mov r7, r8
cmp r5, 0
--
blx sym.imp.mmap64
movs r2, 0
strb r2, [r0, r4]
b 0x8edc
adds r3, 1
b 0x8f84
ldr r3, [sp, 0x1c]
cmp r3, 0
beq.w 0x8e8c
lsls r4, r3, 4
adds r0, r4, r6
blx 0x21fc
ldr r2, [sp, 0x3c]
str r0, [sp, 0x48]
str r0, [r2]
cmp r0, 0
beq.w 0x9432
ldr r3, [sp, 0x48]
movs r1, 0
mov sb, sl
str r1, [sp, 0x34]
--
blx sym.imp.mmap64
movs r3, 0
strb r3, [r5, r4]
adds r4, 1
adds r3, r5, r4
str r3, [sp, 0x50]
ldr r3, [sp, 0x10]
ldr r2, [sp, 0x28]
ldr r1, [sp, 0x30]
adds r7, r3, r7
adc r2, r2, 0
str r2, [sp, 0x28]
ldr r2, [sp, 0x1c]
adds r2, r2, r3
adc r1, r1, 0
adds.w r3, sl, r3
mov sl, r3
str r1, [sp, 0x30]
ldr r3, [sp, 0x2c]
ldr r1, [sp, 8]
str r2, [sp, 0x1c]
--
blx sym.imp.mmap64
ldr r2, [sp]
movs r3, 0
strb.w r3, [r2, sl]
add.w sl, sl, 1
add.w r3, r2, sl
str r3, [sp]
ldr r3, [sp, 0x14]
adds r6, 1
add.w r8, r8, 8
adds r4, r4, r3
adc sb, sb, 0
adds r5, r3, r5
ldr r3, [sp, 0x18]
adc r7, r7, 0
cmp r3, r6
bne.w 0x98ce
ldr r4, [sp]
ldr.w sl, [sp, 0xc]
ldr r0, [sp, 0x88]
blx 0x20a4
--
blx sym.imp.mmap64
mov.w r3, 0
strb r3, [r4, r6]
adds r6, 1
add r4, r6
ldr r3, [sp, 0x3c]
add r8, r3
ldr r3, [sp, 0x14]
cmp sb, r3
bne 0x9a1c
ldr.w sl, [sp]
ldr r0, [sp, 0x64]
blx 0x20a4
ldr r2, [0x00009d74]
ldr r3, [0x00009d58]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xd4]
eors r2, r3
mov.w r3, 0
--
blx sym.imp.mmap64
ldr r3, [r4, 8]
mov r0, r5
add r3, r5
str r3, [r4, 8]
pop {r3, r4, r5, r6, r7, pc}
movs r5, 0
mov r0, r5
pop {r3, r4, r5, r6, r7, pc}
ldr r3, [0x0000a4d0]
movs r2, 0x63
ldr r1, [0x0000a4d4]
ldr r0, [0x0000a4d8]
add r3, pc
add r1, pc
add r0, pc
blx 0x246c
ldr r3, [0x0000a4dc]
movs r2, 0x62
ldr r1, [0x0000a4e0]
ldr r0, [0x0000a4e4]
--
blx sym.imp.mmap64
mov r0, r4
blx 0x20a4
mov r0, r5
pop.w {r4, r5, r6, r7, r8, pc}
movs r4, 0
blx sym.imp.__stack_chk_fail
mov r5, r0
mov r0, r4
blx 0x20a4
mov r0, r5
pop.w {r4, r5, r6, r7, r8, pc}
nop
push {r4, lr}
mov r4, r0
ldr r0, [r0, 0x54]
mov.w r2, 0x3e8
movs r3, 0
asrs r1, r0, 0x1f
bl 0xac00
ldr r2, [r4, 0x50]
[*] Function mmap used 46 times libkmod.so.2.3.7
