[*] Binary protection state of filefrag
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of filefrag
movs r1, r0
lsls r4, r7, 1
movs r0, r0
adds r2, r5, r2
movs r1, r0
adds r6, r5, r2
movs r1, r0
b 0x170c
nop
ldr.w ip, [0x000017ac]
movs r1, 1
push {r3, lr}
mov r3, r0
ldr.w lr, [0x000017b0]
add ip, pc
ldr r2, [0x000017b4]
mov r0, ip
ldr.w r4, [ip, lr]
add r2, pc
ldr r0, [r4]
blx sym.imp.__fprintf_chk
movs r0, 1
blx sym.imp.exit
--
add r2, pc
ldr r1, [0x000017f8]
add r0, pc
ldr r4, [r2]
str r0, [sp, 0xc]
add r1, pc
ldr r2, [r2, 4]
movs r0, 1
adds r5, r4, r0
str r1, [sp, 4]
lsls r4, r0
ldr r3, [0x000017fc]
ldr r1, [0x00001800]
lsls r2, r0
adds r4, 3
add r3, pc
str r5, [sp, 8]
add r1, pc
adds r2, 3
str r4, [sp]
blx sym.imp.__printf_chk
add sp, 0x14
pop {r4, r5, pc}
--
adds r1, r6, r0
add r2, pc
ldr r0, [r2]
str r0, [r6, r3]
ldrh r3, [r2, 4]
strh r3, [r1, 4]
cbz r5, 0x19f8
cbz r4, 0x19f8
ldr.w r8, [0x00001a64]
movs r5, 1
add r7, sp, 8
add r8, pc
tst r5, r4
beq 0x19e2
movs r1, 1
mov r3, r8
movs r2, 0xc
mov r0, r7
str r5, [sp]
bic.w r4, r4, r5
blx sym.imp.__sprintf_chk
mov r1, r7
mov r0, r6
--
beq.w 0x1c6c
ldr r3, [0x00001c84]
add r3, pc
ldr r1, [0x00001c88]
ldr r0, [sp, 0x5c]
ldr r2, [sp, 0x58]
add r1, pc
ldr r1, [r1]
lsrs r2, r5
str r1, [sp]
lsl.w r1, r0, fp
orrs r2, r1
lsr.w r1, r0, sl
orrs r2, r1
movs r1, 1
str r2, [sp, 8]
lsr.w r2, r0, r5
mov r0, sb
str r2, [sp, 0xc]
mov.w r2, 0x100
blx sym.imp.__sprintf_chk
b 0x1b90
ldr r3, [0x00001c8c]
mov.w r2, 0x100
movs r1, 1
mov r0, sb
add r3, pc
ldr r3, [r3]
str r3, [sp]
ldr r3, [0x00001c90]
add r3, pc
str r3, [sp, 4]
ldr r3, [0x00001c94]
add r3, pc
blx sym.imp.__sprintf_chk
ldr r0, [r4, 0x28]
movs r2, 1
--
mov.w r0, 1
ldr r1, [sp, 0x68]
str r3, [sp, 0x24]
ldr r3, [sp, 0x54]
strd r8, r1, [sp]
str.w sb, [sp, 0x40]
adc.w r3, r3, r1
ldr r1, [0x00001c9c]
str r7, [sp, 0x20]
str r6, [sp, 0x10]
add r1, pc
str r3, [sp, 0x14]
ldrd r1, r3, [r1]
ldr r2, [sp, 0x60]
str r1, [sp, 0x28]
str r1, [sp, 0x18]
ldr r1, [0x00001ca0]
str r3, [sp, 8]
add r1, pc
ldr r1, [r1]
blx sym.imp.__printf_chk
ldr r2, [0x00001ca4]
ldr r3, [0x00001c7c]
--
blx sym.imp.__errno_location
ldr r0, [r0]
cmp r0, 0x35
it ne
rsbne r0, r0, 0
bne 0x1eaa
ldr r4, [0x00001f70]
mvn r0, 0x34
add r4, pc
ldr r3, [r4, 0x10]
cmp r3, 0
bne 0x1eaa
ldr r0, [sp, 0x3c]
ldr r1, [0x00001f74]
ldr r2, [0x00001f78]
ldr.w r3, [fp, 8]
ldr r1, [r0, r1]
add r2, pc
ldr r0, [r1]
movs r1, 1
blx sym.imp.__fprintf_chk
movs r3, 1
mvn r0, 0x34
[*] Function printf used 7 times filefrag
