[*] Binary protection state of libpaho-mqtt3cs.so.1.3.9
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function mmap tear down of libpaho-mqtt3cs.so.1.3.9
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/rootfs.img_unblob_extracted/rootfs.img_extract/0-50593792.squashfs_v4_le_extract/usr/lib/libpaho-mqtt3cs.so.1.3.9 @ 0x76ec */
| #include <stdint.h>
|
; (fcn) fcn.000076ec () | void fcn_000076ec (int16_t arg1, int16_t arg2, int16_t arg3, int16_t arg4) {
| r0 = arg1;
| r1 = arg2;
| r2 = arg3;
| r3 = arg4;
| if (? >= ?) {
0x000076ec ldrbmi lr, [r0, sp, lsr 18]! |
| }
0x000076f0 mov r7, r0 | r7 = r0;
0x000076f2 ldr.w r5, [r0, r3, lsl 3] | offset_0 = r3 << 3;
| r5 = *((r0 + offset_0));
0x000076f6 mov r8, r3 | r8 = r3;
0x000076f8 mov r6, r1 | r6 = r1;
0x000076fa mov sb, r2 | sb = r2;
| if (r5 == 0) {
0x000076fc cbz r5, 0x7754 | goto label_3;
| }
0x000076fe add.w sl, r0, r3, lsl 3 | sl = r0 + (r3 << 3);
0x00007702 b 0x770a |
| while (r0 != 0) {
0x00007704 ldr r3, [r3, 4] | r3 = *((r3 + 4));
| if (r3 == 0) {
0x00007706 cbz r3, 0x7756 | goto label_4;
| }
0x00007708 mov r5, r3 | r5 = r3;
0x0000770a ldr.w r4, [sl, 4] | r4 = *((sl + 4));
0x0000770e movs r2, 1 | r2 = 1;
0x00007710 ldr r0, [r5, 0xc] | r0 = *((r5 + 0xc));
0x00007712 mov r1, r6 | r1 = r6;
0x00007714 blx r4 | r0 = uint32_t (*r4)(uint32_t, uint32_t, uint32_t) (r0, r1, r2);
0x00007716 cmp r0, 0 |
0x00007718 ite gt |
| if (r0 <= 0) {
0x0000771a movgt ip, 1 |
| }
| if (r0 <= 0) {
0x0000771e mov.w ip, 0 |
| }
0x00007722 add.w r3, r5, ip, lsl 2 | r3 = r5 + (ip << 2);
0x00007726 mov r4, ip | r4 = ip;
0x00007728 bne 0x7704 |
| }
0x0000772a ldrb r3, [r7, 0x1c] | r3 = *((r7 + 0x1c));
0x0000772c lsls r2, r3, 0x1e | r2 = r3 << 0x1e;
| if (r2 < r3) {
0x0000772e bmi 0x77ac | goto label_5;
| }
0x00007730 mov r1, r5 | r1 = r5;
0x00007732 cmp.w r8, 0 |
| if (r8 != 0) {
0x00007736 bne 0x7742 | goto label_0;
| }
0x00007738 ldr r3, [r7, 0x18] | r3 = *((r7 + 0x18));
0x0000773a ldr r2, [r5, 0x10] | r2 = *((r5 + 0x10));
0x0000773c add r3, sb | r3 += sb;
0x0000773e subs r3, r3, r2 | r3 -= r2;
0x00007740 str r3, [r7, 0x18] | *((r7 + 0x18)) = r3;
| do {
| label_0:
0x00007742 mov r0, r7 | r0 = r7;
0x00007744 mov r2, r8 | r2 = r8;
0x00007746 strd r6, sb, [r1, 0xc] | __asm ("strd r6, sb, [r1, 0xc]");
0x0000774a bl 0x76a8 | fcn_000076a8 (r0, r1, r2);
0x0000774e mov r0, r6 | r0 = r6;
0x00007750 pop.w {r4, r5, r6, r7, r8, sb, sl, pc} |
| label_3:
0x00007754 mov r4, r5 | r4 = r5;
| label_4:
0x00007756 ldrb r3, [r7, 0x1c] | r3 = *((r7 + 0x1c));
0x00007758 lsls r3, r3, 0x1f | r3 <<= 0x1f;
| if (r3 >= r3) {
0x0000775a bpl 0x77a2 | goto label_6;
| }
0x0000775c ldr r0, [pc, 0x58] |
0x0000775e movs r1, 0xf8 | r1 = 0xf8;
0x00007760 movs r2, 0x18 | r2 = 0x18;
0x00007762 add r0, pc | r0 = 0xef1e;
0x00007764 bl 0x10074 | fcn_00010074 (r0, r1, r2);
0x00007766 stc2 p6, c4, [r6], {1} | __asm ("stc2 p6, c4, [r6], {1}");
| if (r1 == 0) {
| label_1:
0x0000776a cbz r1, 0x77ac | goto label_5;
| }
0x0000776c movs r3, 0 | r3 = 0;
0x0000776e str r3, [r1] | *(r1) = r3;
0x00007770 str r3, [r1, 4] | *((r1 + 4)) = r3;
0x00007772 str r3, [r1, 8] | *((r1 + 8)) = r3;
0x00007774 str r3, [r1, 0xc] | *((r1 + 0xc)) = r3;
0x00007776 str r3, [r1, 0x10] | *((r1 + 0x10)) = r3;
0x00007778 str r3, [r1, 0x14] | *((r1 + 0x14)) = r3;
| if (r5 == 0) {
0x0000777a cbz r5, 0x77b2 | goto label_7;
| }
0x0000777c add.w ip, r5, r4, lsl 2 |
0x00007780 str.w r1, [ip, 4] | __asm ("str.w r1, [ip, 4]");
| label_2:
0x00007784 ldrb r3, [r1, 0x14] | r3 = *((r1 + 0x14));
0x00007786 str r5, [r1] | *(r1) = r5;
0x00007788 orr r3, r3, 1 | r3 |= 1;
0x0000778c strb r3, [r1, 0x14] | *((r1 + 0x14)) = r3;
0x0000778e cmp.w r8, 0 |
0x00007792 bne 0x7742 |
| } while (r8 != 0);
0x00007794 ldr r3, [r7, 0x14] | r3 = *((r7 + 0x14));
0x00007796 adds r3, 1 | r3++;
0x00007798 str r3, [r7, 0x14] | *((r7 + 0x14)) = r3;
0x0000779a ldr r3, [r7, 0x18] | r3 = *((r7 + 0x18));
0x0000779c add r3, sb | r3 += sb;
0x0000779e str r3, [r7, 0x18] | *((r7 + 0x18)) = r3;
0x000077a0 b 0x7742 | goto label_0;
| label_6:
0x000077a2 movs r0, 0x18 | r0 = 0x18;
0x000077a4 blx 0x3474 | r0 = fcn_00003474 ();
0x000077a8 mov r1, r0 | r1 = r0;
0x000077aa b 0x776a | goto label_1;
| label_5:
0x000077ac movs r0, 0 | r0 = 0;
0x000077ae pop.w {r4, r5, r6, r7, r8, sb, sl, pc} |
| label_7:
0x000077b2 str.w r1, [r7, r8, lsl 3] | __asm ("str.w r1, [r7, r8, lsl 3]");
0x000077b6 b 0x7784 | goto label_2;
| }
[*] Function mmap used 1 times libpaho-mqtt3cs.so.1.3.9
