[*] Binary protection state of mod_proxy_http.so
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mod_proxy_http.so
beq 0x1bbc
ldr r0, [sp, 0x3c]
mov r2, r8
movs r1, 2
movs r6, 1
blx loc.imp.apr_bucket_immortal_create
str r7, [r0]
ldr r3, [r4, 8]
str r3, [r0, 4]
ldr r3, [r4, 8]
str r0, [r3]
str r0, [r4, 8]
b 0x1bbc
strd r3, r2, [sp]
add r3, sp, 0x48
ldr r2, [0x00001d88]
movs r1, 0x14
mov r0, r3
str r3, [sp, 0x30]
add r2, pc
blx loc.imp.apr_snprintf
ldr r3, [sp, 0x30]
mov r1, r0
--
cmp r3, 1
beq 0x20f6
ldr r1, [0x000022a4]
ldr.w r0, [r4, 0xc0]
add r1, pc
blx loc.imp.apr_table_get
mov sl, r0
cmp r0, 0
beq.w 0x2222
ldr.w r8, [sp, 0x24]
cmp.w r8, 0
beq.w 0x221c
ldrh.w r3, [sp, 0x2a]
cmp r3, r7
beq 0x21ba
ldr r2, [0x000022a8]
add.w sb, sp, 0x34
movs r1, 7
mov r0, sb
add r2, pc
blx loc.imp.apr_snprintf
ldr r7, [sp, 0x2c]
movs r1, 0x3a
--
str r5, [r4, 4]
str r3, [sp, 0xa0]
str.w sl, [sp, 0x90]
str.w sl, [sp, 0x54]
str.w sl, [sp, 0x28]
blx loc.imp.ap_create_request_config
mov r1, r4
str.w r0, [r4, 0x104]
mov r0, fp
blx loc.imp.proxy_run_create_req
ldr r3, [sp, 0x34]
ldr.w r1, [0x00002dfc]
ldr.w r0, [fp]
str r4, [r3, 4]
ldr r3, [r5, 0xc]
add r1, pc
ldr.w r5, [fp, 0xc0]
ldrh r2, [r3, 0xc]
movs r3, 3
str r3, [r4, 0x20]
blx loc.imp.apr_psprintf
ldr.w r1, [0x00002e00]
mov r2, r0
--
cmp r3, 0x65
beq.w 0x39c0
ldr r3, [sp, 0x28]
cmp r3, 0
beq.w 0x31c4
ldr r3, [sp, 0x28]
cmp r3, 9
ble.w 0x2508
ldr r6, [sp, 0x2c]
mov r0, r6
blx loc.imp.apr_brigade_cleanup
ldr r3, [sp, 0x28]
cmp r3, 0xa
it ne
movne r4, 0
bne.w 0x2fb2
ldr r1, [0x00002e98]
mov r2, r3
ldr r0, [sp, 0x58]
add r1, pc
blx loc.imp.apr_psprintf
b.w 0x39ae
ldr r3, [0x00002e9c]
--
cmp r3, r0
it eq
ldreq r3, [fp, 8]
ldr r2, [r6, 0x10]
it eq
ldreq r0, [r3, 0x34]
ldr.w ip, [r2, 0x3c]
ldr.w r3, [fp, 0x28]
ldr r2, [sp, 0xa0]
cmp.w ip, 3
smull r2, lr, r2, r3
asr.w r2, r3, 0x1f
rsb r2, r2, lr, asr 6
mls r3, r1, r2, r3
add.w r1, r6, 0x14
strd r0, r1, [sp]
beq.w 0x357e
ldr.w r1, [0x00003ac0]
ldr r0, [sp, 0x58]
add r1, pc
blx loc.imp.apr_psprintf
mov r2, r0
ldr.w r1, [0x00003ac4]
--
beq 0x34ba
ldrsb r3, [r3, r2]
cmp r3, 0
blt 0x34ba
ldr r3, [r1, 0x10]
b 0x3404
cmp r1, 0
beq.w 0x378e
ldr r3, [r1, 4]
cmp r3, 6
ite le
movle r3, 0
movgt r3, 1
b.w 0x2b5a
ldr.w r1, [0x00003ae4]
ldr r0, [sp, 0x58]
add r1, pc
str r1, [sp, 8]
ldr.w r1, [0x00003ae8]
add r1, pc
blx loc.imp.apr_psprintf
mov r2, r0
b 0x3372
[*] Function printf used 6 times mod_proxy_http.so
