[*] Binary protection state of vftpd
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of vftpd
blt.w 0x3e62
ldr r5, [0x00003e94]
mov r1, r7
ldr r3, [r6]
add.w fp, sp, 0x1c
add r5, pc
ldrh r0, [r3]
ldrd r3, r2, [r5, 4]
bl 0x3958
ldr r3, [r5, 0x10]
add r2, sp, 0xbc
mov r5, r2
mov r1, r4
str r2, [sp, 8]
mov r0, r5
subs r3, 1
movs r2, 0x20
str r3, [sp]
ldr r3, [0x00003e98]
add r3, pc
blx sym.imp.__sprintf_chk
movs r2, 0x20
movs r1, 0
--
ldr r2, [0x00003ea8]
mov r1, r4
movs r0, 3
add r2, pc
blx 0x19cc
blx sym.imp.__errno_location
ldr r3, [r0]
adds r2, r7, 1
mov r5, r0
str r3, [sp, 0x14]
beq 0x3d9c
b 0x3d94
ldr r3, [r6, 4]
movs r2, 0x20
ldr r4, [sp, 8]
movs r1, 1
str r3, [sp]
ldr r3, [0x00003eac]
mov r0, r4
add r3, pc
blx sym.imp.__sprintf_chk
movs r2, 0x20
movs r1, 0
--
mov r0, r6
blx sym.imp.lstat
cmp r0, 0
blt.w 0x4c56
ldr r3, [0x00004ccc]
ldr r0, [r4, 0x18]
add r3, pc
ldr r2, [r3]
cbz r2, 0x4ac0
ldr r3, [r3, 4]
cmp r3, r0
beq 0x4ae4
blx sym.imp.getpwuid
cmp r0, 0
beq.w 0x4c3a
ldr r2, [0x00004cd0]
movs r1, 0x21
ldr r3, [r0]
ldr r0, [sp, 0x3c]
add r2, pc
blx sym.imp.snprintf
ldr r3, [0x00004cd4]
ldr r2, [r4, 0x18]
add r3, pc
str r2, [r3, 4]
movs r2, 1
str r2, [r3]
ldr r3, [0x00004cd8]
ldr r0, [r4, 0x1c]
add r3, pc
ldr r2, [r3, 0x2c]
cbz r2, 0x4af4
ldr r3, [r3, 0x30]
cmp r3, r0
beq 0x4b1c
blx sym.imp.__snprintf_chk
cmp r0, 0
beq.w 0x4c1e
ldr r3, [r0]
movs r1, 0x21
ldr r0, [0x00004cdc]
ldr r2, [0x00004ce0]
add r0, pc
adds r0, 0x34
add r2, pc
blx sym.imp.snprintf
ldr r3, [0x00004ce4]
ldr r2, [r4, 0x1c]
[*] Function printf used 5 times vftpd
