[*] Binary protection state of dcore
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of dcore
cbz r0, 0x15ea
sub.w r0, r0, r8
uxtb r0, r0
ldr r3, [sp, 0x48]
sub.w sb, sb, 0x5a
clz sb, sb
strb.w r0, [sp, 0x58]
lsr.w sb, sb, 5
mov r0, r4
str r3, [sp, 0x5c]
add r4, sp, 0x3c
ldr r3, [sp, 0x44]
mov.w r8, 5
strb.w sb, [sp, 0x5a]
strb.w r3, [sp, 0x5b]
blx sym.imp.elf_nextscn
mov r1, r5
movs r2, 0x10
add r0, sp, 0x74
movs r5, 0x7c
blx sym.imp.__printf_chk
movs r3, 3
add r1, sp, 0x4c
--
subs r4, r0, 0
it ge
addge r5, r5, r4
bge 0x1cf2
blx sym.imp.__isoc99_sscanf
ldr r3, [r0]
cmp r3, 4
beq 0x1cf2
mov.w r0, -1
pop.w {r4, r5, r6, r7, r8, pc}
mov r0, r5
pop.w {r4, r5, r6, r7, r8, pc}
push {r3, r4, r5, r6, r7, lr}
mov r7, r0
mov r6, r1
mov r5, r2
movs r4, 0
subs r2, r5, r4
adds r1, r6, r4
mov r0, r7
blx sym.imp.__fprintf_chk
cmp r0, 0
it ge
--
beq 0x1df2
mov.w r3, 0x4000
mov r2, sl
cmp sl, r3
ldrd r0, r1, [sp, 0xc]
it hs
movhs r2, r3
blx sym.imp.__read_chk
adds r3, r0, 1
mov r7, r0
beq 0x1d88
cmp r0, 0
ble 0x1d88
movs r6, 0
subs r5, r7, r6
mov.w fp, 0
mov r4, r6
sub.w r2, r5, fp
add.w r1, r8, r4
mov r0, sb
blx sym.imp.__fprintf_chk
cmp r0, 0
itt ge
--
sub sp, 8
ldr r5, [0x00002668]
mov r6, r0
movs r1, 1
ldr r4, [0x0000266c]
add r5, pc
ldr r2, [0x00002670]
ldr r3, [r0]
mov r0, sp
ldr r4, [r5, r4]
add r2, pc
ldr r5, [0x00002674]
ldr r4, [r4]
str r4, [sp, 4]
mov.w r4, 0
blx sym.imp.puts
ldr r0, [sp]
add r5, pc
cmp r0, 0
beq 0x2660
blx sym.imp.__asprintf_chk
mov r8, r0
ldr r0, [sp]
[*] Function printf used 4 times dcore
