[*] Binary protection state of pidstat

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of pidstat

mov r0, r4
blx 0x1040
movs r3, 0
mov r5, r0
cmp r0, 0
beq 0x2786
str.w r3, [r7, 0xa8]
b 0x272c
blx 0x10b8
ldrb r2, [r4, 0xb]
ldr r3, [r0]
ldrh.w r3, [r3, r2, lsl 1]
lsls r3, r3, 0x14
bmi 0x2760
mov r0, r5
blx sym.imp.strrchr
mov r4, r0
cmp r0, 0
bne 0x271c
mov r0, r5
blx sym.imp.__snprintf_chk
ldr r3, [r6, 0x3c]
bic r3, r3, 2
--
cmp r0, 0
beq 0x28b0
movs r2, 1
mov r1, r0
str r2, [r0, 0x38]
mov r3, r6
add r2, sp, 8
mov r0, sb
str.w r8, [sp]
bl 0x27a8
cmp r0, 0
beq 0x28b0
movs r3, 0
mov r0, r5
str r3, [r4, 0x38]
blx sym.imp.strrchr
mov r4, r0
cmp r0, 0
bne 0x28ba
mov r0, r5
blx sym.imp.__snprintf_chk
ldr r2, [0x00002944]
ldr r3, [0x00002938]
--
mov r5, r0
cmp r0, 0
beq 0x2a6a
movs r3, 1
mov r1, r0
str r3, [r0, 0x38]
add r2, sp, 8
movs r3, 0
mov r0, sb
str r4, [sp]
bl 0x27a8
cbz r0, 0x2ace
movs r3, 0
mov r0, r6
str r3, [r5, 0x38]
blx sym.imp.strrchr
mov r5, r0
cmp r0, 0
bne 0x2a74
mov r0, r6
blx sym.imp.__snprintf_chk
b 0x2a12
ldr.w r3, [r8, 8]
--
movs r1, r0
ldr r0, [0x000050a4]
movs r0, r0
ldr r0, [0x000053f0]
movs r0, r0
ldr r2, [0x00005164]
movs r0, r0
invalid
ldr r0, [0x0000506c]
movs r0, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov r7, r1
ldr r1, [0x00005274]
sub sp, 0x24
mov r6, r0
mov sb, r2
movs r0, 1
movs r2, 0
add r1, pc
mov fp, r3
blx sym.imp.__fprintf_chk
adds r0, 1
beq.w 0x5266
--
mov r0, r6
add r6, sp, 0x20
mov r1, r6
strb.w r7, [sp, 0x47b]
blx 0x10a0
cmp r0, 0
blt 0x63cc
ldr r3, [sp, 0x30]
and r3, r3, 0xf000
cmp.w r3, 0x4000
bne 0x63cc
cmp.w r8, 0
bne 0x6472
mov r0, r5
add.w sb, sb, 1
blx sym.imp.strrchr
mov r4, r0
cmp r0, 0
bne 0x63d8
mov r0, r5
blx sym.imp.__snprintf_chk
add.w r0, sb, 1
ldr r2, [0x000064a8]
--
blx sym.imp.abort
mov r5, r0
cmp r0, 0
bne 0x6b86
mov r1, r4
add.w r4, sp, 0x2000
adds r4, 0x28
mov.w r2, 0x100
subs r3, r4, 4
mov r0, r3
blx 0x114c
ldrd r1, r2, [sp, 0x18]
strb.w r5, [r4, 0xffb]
bl 0x6a44
cmp r0, 0
bne 0x6b86
mov r4, r0
b 0x6c32
mov.w r4, -1
mov r0, r7
blx sym.imp.__snprintf_chk
ldr r2, [0x00006c80]
add.w r1, sp, 0x3000
--
mov.w r3, 0x400
ldr r1, [0x00006e54]
ldr.w ip, [0x00006e58]
add r1, pc
push {r4, r5, lr}
mov r5, r0
add.w r0, r1, 0xc
sub sp, 0x10
add ip, pc
ldr r1, [0x00006e5c]
add r2, sp, 0x1c
ldr r4, [r2], 4
ldr.w r1, [ip, r1]
ldr r1, [r1]
str r1, [sp, 0xc]
mov.w r1, 0
strd r4, r2, [sp]
str r2, [sp, 8]
mov r1, r3
movs r2, 1
blx sym.imp.__vsnprintf_chk
cmp r5, 0
ble 0x6e22
--
mov.w r3, 0x400
ldr r1, [0x00006ee8]
ldr.w ip, [0x00006eec]
add r1, pc
push {r4, r5, lr}
mov r5, r0
addw r0, r1, 0x40c
sub sp, 0x10
add ip, pc
ldr r1, [0x00006ef0]
add r2, sp, 0x1c
ldr r4, [r2], 4
ldr.w r1, [ip, r1]
ldr r1, [r1]
str r1, [sp, 0xc]
mov.w r1, 0
strd r4, r2, [sp]
str r2, [sp, 8]
mov r1, r3
movs r2, 1
blx sym.imp.__vsnprintf_chk
cmp r5, 0
ble 0x6eba
--
orrs r2, r5
bic r3, r3, 0xff
orrs r3, r1
ldr r1, [sp, 0x14]
cmp r3, sl
it eq
cmpeq r2, r1
bne 0x8a44
ldr r6, [0x00008b28]
mov r1, r4
mov r5, r0
movs r2, 0x7f
add r6, pc
sub.w r4, r6, 0xb0
mov r0, r4
blx 0x114c
strb r5, [r6, -0x31]
b 0x8abe
mov r4, r0
mov r0, r7
blx sym.imp.__snprintf_chk
ldr r2, [0x00008b2c]
ldr r3, [0x00008b14]

[*] Function printf used 9 times pidstat