[*] Binary protection state of dbox
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of dbox
nop
str r4, [r1, 0x60]
movs r0, r0
str r0, [sp, 0x170]
movs r1, r0
lsls r4, r5, 9
movs r0, r0
ldr r4, [sp, 0x250]
movs r1, r0
ldr r4, [sp, 0x158]
movs r1, r0
ldrh r4, [r4, 0x3a]
movs r1, r0
ldr r3, [sp, 0x220]
movs r1, r0
push {r3, r4, r5, r6, r7, lr}
mov r6, r0
mov r5, r1
movs r0, 1
movs r1, 0x10
blx sym.imp.__vfprintf_chk
mov r4, r0
cbz r0, 0x5e7c
--
ldrh r0, [r3, 0x18]
movs r1, r0
ldr r4, [r5, r2]
movs r0, r0
mov.w r3, -1
clz r0, r0
lsr.w r0, r3, r0
adds r0, 1
bx lr
push {r4, lr}
movs r1, 0x4c
movs r4, 0x10
cbz r0, 0x62c0
clz r0, r0
mov.w r4, -1
lsrs r4, r0
adds r1, r4, 4
adds r4, 1
lsls r1, r1, 2
movs r0, 1
blx sym.imp.__vfprintf_chk
str r4, [r0, 4]
pop {r4, pc}
--
add sp, 8
ldr lr, [sp], 4
add sp, 0xc
bx lr
blx sym.imp.fork
nop
ldrh r2, [r7, 4]
movs r1, r0
lsls r4, r5, 9
movs r0, r0
ldrh r6, [r5, 4]
movs r1, r0
lsls r4, r7, 9
movs r0, r0
ldrh r0, [r2, 4]
movs r1, r0
push {r3, r4, r5, lr}
movs r1, 0x10
mov r5, r0
movs r0, 1
blx sym.imp.__vfprintf_chk
movs r3, 1
mov r4, r0
--
str.w r3, [r5, 0x114]
b 0x6792
str.w r8, [r7, 4]
ldr r0, [r4, 4]
cmp r0, 0
beq.w 0x65dc
b 0x65ce
add.w r1, r5, 0xc
ldr r0, [r4, 8]
bl 0x6370
mov r0, r5
blx 0x2968
movs r3, 0
strd r3, r3, [fp, -0x98]
b 0x6792
mov r0, r5
blx 0x2968
b 0x676e
mov.w r1, 0x118
movs r0, 1
blx sym.imp.__vfprintf_chk
mov r5, r0
add.w r6, r0, 0x18
--
ldr.w r0, [sb, r7, lsl 3]
blx sym.imp.CGI_cleanup
ldr.w r3, [sb, r7, lsl 3]
adds r7, 1
ldr r2, [r6]
ldr.w r1, [r8, r0, lsl 2]
and r3, r3, 0x1f
lsl.w r3, r4, r3
cmp r2, r7
orr.w r3, r3, r1
str.w r3, [r8, r0, lsl 2]
bgt 0x72a0
add r3, sp, 0xa4
movs r2, 0x80
mov r1, r8
mov r0, r3
str r3, [sp, 0x14]
blx sym.imp.curl_global_init
movs r1, 1
mov.w r0, 0x32000
blx sym.imp.__vfprintf_chk
mov sb, r0
cmp r0, 0
--
cmp r3, 0
bgt 0x7302
movs r4, 0
b 0x73ba
movs r4, 0
b 0x73c0
blx sym.imp.fork
nop
ldrb r0, [r7, 0xb]
movs r1, r0
lsls r4, r5, 9
movs r0, r0
ldrb r0, [r4, 6]
movs r1, r0
push {r4, r5, r6, lr}
mov r6, r0
mov r5, r1
movs r0, 1
movs r1, 0xc
mov r4, r2
blx sym.imp.__vfprintf_chk
cbz r0, 0x7424
strd r5, r6, [r0]
--
ldr r2, [r3]
ldr r3, [sp, 0x1ac]
eors r2, r3
mov.w r3, 0
bne 0x7630
movs r0, 0
add sp, 0x1b4
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r3, [r5]
movs r2, 1
mov r0, r6
str r3, [sp, 4]
ldr r3, [0x00007674]
add r3, pc
str r3, [sp]
movs r3, 0xa
mov r1, r3
blx sym.imp.getcwd
movs r1, 1
movs r0, 0x58
blx sym.imp.__vfprintf_chk
mov r7, r0
cmp r0, 0
--
movs r1, 0
ldr.w r5, [0x00008ebc]
add r6, pc
ldr r0, [r0, 0x1c]
str r2, [r4, 0xc]
movs r2, 1
ldr r5, [r6, r5]
ldr.w r3, [0x00008ec0]
add r0, r2
ldr r5, [r5]
str r5, [sp, 0x64]
mov.w r5, 0
ldr.w r5, [0x00008ec4]
add r3, pc
strd r1, r1, [sp, 0x3c]
movs r1, 0xb4
str r3, [sp, 0x38]
add r5, pc
str r2, [sp, 0x34]
str r5, [sp, 0x14]
blx sym.imp.__vfprintf_chk
str r0, [sp, 0x30]
cmp r0, 0
[*] Function fprintf used 8 times dbox
