[*] Binary protection state of mod_proxy_http.so

  
  	Full RELRO     Canary found      NX enabled   DSO          No RPATH     No RUNPATH   No Symbols


[*] Function sprintf tear down of mod_proxy_http.so

str r5, [r4, 4]
str r3, [sp, 0xa0]
str.w sl, [sp, 0x90]
str.w sl, [sp, 0x54]
str.w sl, [sp, 0x28]
blx loc.imp.ap_create_request_config
mov r1, r4
str.w r0, [r4, 0x104]
mov r0, fp
blx loc.imp.proxy_run_create_req
ldr r3, [sp, 0x34]
ldr.w r1, [0x00002dfc]
ldr.w r0, [fp]
str r4, [r3, 4]
ldr r3, [r5, 0xc]
add r1, pc
ldr.w r5, [fp, 0xc0]
ldrh r2, [r3, 0xc]
movs r3, 3
str r3, [r4, 0x20]
blx loc.imp.apr_psprintf
ldr.w r1, [0x00002e00]
mov r2, r0
--
cmp r3, 0x65
beq.w 0x39c0
ldr r3, [sp, 0x28]
cmp r3, 0
beq.w 0x31c4
ldr r3, [sp, 0x28]
cmp r3, 9
ble.w 0x2508
ldr r6, [sp, 0x2c]
mov r0, r6
blx loc.imp.apr_brigade_cleanup
ldr r3, [sp, 0x28]
cmp r3, 0xa
it ne
movne r4, 0
bne.w 0x2fb2
ldr r1, [0x00002e98]
mov r2, r3
ldr r0, [sp, 0x58]
add r1, pc
blx loc.imp.apr_psprintf
b.w 0x39ae
ldr r3, [0x00002e9c]
--
cmp r3, r0
it eq
ldreq r3, [fp, 8]
ldr r2, [r6, 0x10]
it eq
ldreq r0, [r3, 0x34]
ldr.w ip, [r2, 0x3c]
ldr.w r3, [fp, 0x28]
ldr r2, [sp, 0xa0]
cmp.w ip, 3
smull r2, lr, r2, r3
asr.w r2, r3, 0x1f
rsb r2, r2, lr, asr 6
mls r3, r1, r2, r3
add.w r1, r6, 0x14
strd r0, r1, [sp]
beq.w 0x357e
ldr.w r1, [0x00003ac0]
ldr r0, [sp, 0x58]
add r1, pc
blx loc.imp.apr_psprintf
mov r2, r0
ldr.w r1, [0x00003ac4]
--
beq 0x34ba
ldrsb r3, [r3, r2]
cmp r3, 0
blt 0x34ba
ldr r3, [r1, 0x10]
b 0x3404
cmp r1, 0
beq.w 0x378e
ldr r3, [r1, 4]
cmp r3, 6
ite le
movle r3, 0
movgt r3, 1
b.w 0x2b5a
ldr.w r1, [0x00003ae4]
ldr r0, [sp, 0x58]
add r1, pc
str r1, [sp, 8]
ldr.w r1, [0x00003ae8]
add r1, pc
blx loc.imp.apr_psprintf
mov r2, r0
b 0x3372

[*] Function sprintf used 4 times mod_proxy_http.so