[*] Binary protection state of libaprutil-1.so.0.6.1
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of libaprutil-1.so.0.6.1
lsls r4, r0, 0x12
movs r0, r0
bkpt 0x26
movs r1, r0
adr r1, 0x370
movs r0, r0
ldr r3, [r0, 0xc]
push {r4, lr}
mov r4, r0
tst.w r3, 0xc
bne 0xfd5e
ldr r0, [r4, 4]
blx 0x6edc
ldr r0, [r4, 8]
blx 0x6edc
mov r0, r4
blx 0x6a3c
movs r0, 0
pop {r4, pc}
ldr r0, [r0, 4]
blx sym.imp.__sprintf_chk
b 0xfd48
nop
--
movne r2, -1
movs r2, 0
lsls r3, r3, 3
str.w r2, [r4, 0x42c]
mov.w r2, -1
str r2, [r4, 0x28]
add.w r2, r4, 0x1000
str r3, [r4, 0x10]
cmp r6, 1
ldr.w r3, [r2, 0x430]
add.w r3, r3, 1
str.w r3, [r2, 0x430]
beq 0x107d8
cmp r6, 2
bne 0x10758
ldr r3, [r4, 0xc]
orr r3, r3, 8
str r3, [r4, 0xc]
b 0x10758
ldr r0, [r4, 4]
blx sym.imp.__sprintf_chk
b 0x10758
ldr r3, [r4, 0xc]
--
strb r4, [r3, -0x3]
b 0x18306
strb r4, [r3]
adds r3, 5
strb sl, [r3, -0x4]
strb sb, [r3, -0x3]
strb r8, [r3, -0x2]
strb r2, [r3, -0x1]
b 0x18306
strb r4, [r7], 1
mov r3, r7
b 0x18306
push {r4, r5, r6, lr}
mov r6, r1
ldr r4, [r1, 0xc]
mov r5, r0
cbz r4, 0x18384
ldr r1, [r4]
movs r2, 0
mov r0, r5
blx sym.imp.__printf_chk
str r0, [r4]
ldr r4, [r4, 4]
cmp r4, 0
bne 0x18372
ldr r4, [r6, 0x14]
cbz r4, 0x1839a
ldr r1, [r4]
movs r2, 0
mov r0, r5
blx sym.imp.__printf_chk
str r0, [r4]
ldr r4, [r4, 4]
cmp r4, 0
bne 0x18388
ldr r4, [r6, 0x28]
cbz r4, 0x183b0
ldr r1, [r4, 8]
movs r2, 1
mov r0, r5
blx sym.imp.__printf_chk
str r0, [r4, 8]
ldr r4, [r4, 0xc]
--
str r6, [r1, 0x20]
str r6, [r2, 0x2c]
str r6, [r4, 8]
cmp.w fp, 0
beq 0x1872c
ldr r3, [0x0001884c]
mov.w r8, 0
add r3, pc
add.w sb, r3, 8
str r3, [sp]
b 0x186fe
ldrb r2, [r5, 5]
cmp r2, 0x3a
beq.w 0x187d2
cmp r2, 0
bne 0x18720
ldr.w r1, [fp, 8]
adds r5, 5
movs r2, 1
ldr r0, [r4, 4]
blx sym.imp.__printf_chk
movs r1, 0x10
mov r7, r0
--
beq 0x1877a
strb r8, [r5], 1
ldr r1, [r6]
ldr r0, [r4, 8]
bl 0x1780c
cmn.w r0, 0x63
strd r5, r0, [r6]
bge 0x18788
str r0, [r4, 0xc]
add sp, 0xc
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr.w r1, [fp, 8]
ldrb r2, [r1]
cmp r2, 0
beq 0x1883e
adds r5, 6
b 0x186a8
movs r2, 1
ldr.w r1, [fp, 8]
ldr r0, [r4, 4]
blx sym.imp.__printf_chk
ldr.w r2, [fp, 0xc]
str r0, [r6, 8]
[*] Function printf used 7 times libaprutil-1.so.0.6.1
