[*] Binary protection state of scp.openssh
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of scp.openssh
ldr r2, [0x00002e74]
ldr r3, [0x00002e78]
push {r4, r5, r6, r7, lr}
sub sp, 0x1c
add r2, pc
ldr r4, [0x00002e7c]
ldr r3, [r2, r3]
add r4, pc
ldr r3, [r3]
str r3, [sp, 0x14]
mov.w r3, 0
ldr r3, [r0, 4]
cmp r3, 0
beq 0x2e18
ldr r3, [0x00002e80]
mov r5, r0
add r3, pc
ldr r3, [r3]
cmp r3, 0
bne 0x2dba
blx sym.imp.snprintf
adds r3, r0, 1
mov r4, r0
--
beq.w 0x32bc
add r0, sp, 0x24
blx 0x234c
adds r0, 1
beq.w 0x3290
ldr.w fp, [0x00003314]
ldr r0, [sp, 0x2c]
blx sym.imp.strncasecmp
add fp, pc
ldr r0, [sp, 0x30]
blx sym.imp.strncasecmp
mov r1, fp
movs r0, 0x14
bl 0x14704
mov r1, fp
movs r0, 0x15
bl 0x14704
mov r1, fp
movs r0, 0x16
bl 0x14704
blx sym.imp.snprintf
mov r3, r0
str.w r0, [sl]
--
mov.w r3, 0
add r2, pc
ldr r2, [r2]
cbz r2, 0x3480
ldr r3, [0x00003628]
ldr r3, [r4, r3]
ldr r0, [r3]
ldr r3, [0x0000362c]
add r3, pc
ldr r2, [r3]
mov r3, r1
cmp r1, 0
beq.w 0x3576
ldr r1, [0x00003630]
strd r3, r8, [sp]
mov r3, r7
add r1, pc
bl 0x155d8
adds r1, r5, 1
beq 0x34d0
blx sym.imp.snprintf
mov r4, r0
cmp r0, 0
--
mov r1, r5
mov r0, r4
blx 0x2084
adds r0, 1
beq 0x349a
ldr r2, [0x00003634]
ldr r3, [0x0000361c]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x14]
eors r2, r3
mov.w r3, 0
bne.w 0x35ce
movs r0, 0
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, pc}
ldr r3, [0x00003638]
add r3, pc
ldr r5, [r3, 8]
blx sym.imp.snprintf
mov r4, r0
cmp r0, 0
--
mov r0, r6
blx r5
ldr.w r3, [sl]
add r4, sp, 0x38
mov r0, r3
mov r1, r4
blx 0x1f4c
adds r0, 1
beq.w 0x14dda
ldr r3, [sp, 0x2dc]
ands r7, r3, 8
beq.w 0x14b6a
add r7, sp, 0xa4
mov r0, r7
blx 0x234c
adds r0, 1
beq.w 0x14ce0
ldr r3, [sp, 0x2c]
cbz r3, 0x149c2
blx r3
blx sym.imp.snprintf
adds r5, r0, 1
mov r4, r0
[*] Function printf used 5 times scp.openssh