[*] Binary protection state of libc.so.6
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of libc.so.6
27f12: 4b25 ldr r3, [pc, #148] ; (27fa8 <__uselocale@@GLIBC_2.4+0x27c>)
27f14: 2000 movs r0, #0
27f16: 9907 ldr r1, [sp, #28]
27f18: f04f 32ff mov.w r2, #4294967295 ; 0xffffffff
27f1c: 58e4 ldr r4, [r4, r3]
27f1e: 2322 movs r3, #34 ; 0x22
27f20: e9cd 2000 strd r2, r0, [sp]
27f24: 2203 movs r2, #3
27f26: 68e4 ldr r4, [r4, #12]
27f28: 4421 add r1, r4
27f2a: 4264 negs r4, r4
27f2c: 4021 ands r1, r4
27f2e: 9107 str r1, [sp, #28]
27f30: f081 f866 bl a9000 <__mmap@@GLIBC_PRIVATE>
27f34: 1c43 adds r3, r0, #1
27f36: 4604 mov r4, r0
27f38: d013 beq.n 27f62 <__uselocale@@GLIBC_2.4+0x236>
27f3a: 9b07 ldr r3, [sp, #28]
27f3c: 9906 ldr r1, [sp, #24]
27f3e: f840 3b04 str.w r3, [r0], #4
27f42: f042 fb2d bl 6a5a0 <strcpy@@GLIBC_2.4>
27f46: 4b19 ldr r3, [pc, #100] ; (27fac <__uselocale@@GLIBC_2.4+0x280>)
27f48: 447b add r3, pc
--
29288: 4410 add r0, r2
2928a: 4428 add r0, r5
2928c: f7f4 ee68 blx 1df60 <alloc@plt+0x4>
29290: 6b7b ldr r3, [r7, #52] ; 0x34
29292: 4604 mov r4, r0
29294: 2800 cmp r0, #0
29296: f43f aef0 beq.w 2907a <gettext@@GLIBC_2.4+0x9d2>
2929a: 462a mov r2, r5
2929c: 4651 mov r1, sl
2929e: 301c adds r0, #28
292a0: 3601 adds r6, #1
292a2: f044 e94e blx 6d540 <emcpy@@GLIBC_2.4>
292a6: 4405 add r5, r0
292a8: 4632 mov r2, r6
292aa: 4649 mov r1, r9
292ac: 19ae adds r6, r5, r6
292ae: 4628 mov r0, r5
292b0: f044 e946 blx 6d540 <emcpy@@GLIBC_2.4>
292b4: 68f9 ldr r1, [r7, #12]
292b6: 4630 mov r0, r6
292b8: f041 f972 bl 6a5a0 <strcpy@@GLIBC_2.4>
292bc: f8d7 308c ldr.w r3, [r7, #140] ; 0x8c
292c0: 4a34 ldr r2, [pc, #208] ; (29394 <gettext@@GLIBC_2.4+0xcec>)
--
2d742: f89b 0000 ldrb.w r0, [fp]
2d746: 46a8 mov r8, r5
2d748: 4615 mov r5, r2
2d74a: 2800 cmp r0, #0
2d74c: f47f af60 bne.w 2d610 <realpath@@GLIBC_2.4+0x9c>
2d750: f108 0301 add.w r3, r8, #1
2d754: 429d cmp r5, r3
2d756: f200 80c7 bhi.w 2d8e8 <realpath@@GLIBC_2.4+0x374>
2d75a: 2300 movs r3, #0
2d75c: 702b strb r3, [r5, #0]
2d75e: 9b00 ldr r3, [sp, #0]
2d760: 2b00 cmp r3, #0
2d762: f000 80cc beq.w 2d8fe <realpath@@GLIBC_2.4+0x38a>
2d766: 3501 adds r5, #1
2d768: eba5 0508 sub.w r5, r5, r8
2d76c: f5b5 5f80 cmp.w r5, #4096 ; 0x1000
2d770: f300 80ca bgt.w 2d908 <realpath@@GLIBC_2.4+0x394>
2d774: f8dd b000 ldr.w fp, [sp]
2d778: 4641 mov r1, r8
2d77a: 4658 mov r0, fp
2d77c: f03c ff10 bl 6a5a0 <strcpy@@GLIBC_2.4>
2d780: e735 b.n 2d5ee <realpath@@GLIBC_2.4+0x7a>
2d782: 46a8 mov r8, r5
2d784: 2300 movs r3, #0
2d786: 702b strb r3, [r5, #0]
2d788: 9b00 ldr r3, [sp, #0]
2d78a: 2b00 cmp r3, #0
2d78c: f43f af2d beq.w 2d5ea <realpath@@GLIBC_2.4+0x76>
2d790: 3501 adds r5, #1
2d792: ee1d 0f70 mrc 15, 0, r0, cr13, cr0, {3}
2d796: 4b49 ldr r3, [pc, #292] ; (2d8bc <realpath@@GLIBC_2.4+0x348>)
2d798: 447b add r3, pc
2d79a: 681b ldr r3, [r3, #0]
2d79c: 58c3 ldr r3, [r0, r3]
2d79e: 2b02 cmp r3, #2
2d7a0: d002 beq.n 2d7a8 <realpath@@GLIBC_2.4+0x234>
2d7a2: 2b0d cmp r3, #13
2d7a4: f47f af21 bne.w 2d5ea <realpath@@GLIBC_2.4+0x76>
2d7a8: eba5 0508 sub.w r5, r5, r8
2d7ac: f5b5 5f80 cmp.w r5, #4096 ; 0x1000
2d7b0: f73f af1b bgt.w 2d5ea <realpath@@GLIBC_2.4+0x76>
2d7b4: 9800 ldr r0, [sp, #0]
2d7b6: 4641 mov r1, r8
2d7b8: f03c fef2 bl 6a5a0 <strcpy@@GLIBC_2.4>
2d7bc: e715 b.n 2d5ea <realpath@@GLIBC_2.4+0x76>
2d7be: 2116 movs r1, #22
--
695f4: e6ec b.n 693d0 <__strcasestr@@GLIBC_2.4+0x3c>
695f6: 4672 mov r2, lr
695f8: 18a8 adds r0, r5, r2
695fa: e6e9 b.n 693d0 <__strcasestr@@GLIBC_2.4+0x3c>
695fc: eb05 0308 add.w r3, r5, r8
69600: 4299 cmp r1, r3
69602: bf88 it hi
69604: eba1 0805 subhi.w r8, r1, r5
69608: e7c8 b.n 6959c <__strcasestr@@GLIBC_2.4+0x208>
6960a: bf00 nop
6960c: aad0 add r2, sp, #832 ; 0x340
6960e: 0009 movs r1, r1
00069610 <strcat@@GLIBC_2.4>:
69610: b538 push {r3, r4, r5, lr}
69612: 4604 mov r4, r0
69614: 460d mov r5, r1
69616: f001 fc13 bl 6ae40 <strlen@@GLIBC_2.4>
6961a: 4629 mov r1, r5
6961c: 4420 add r0, r4
6961e: f000 ffbf bl 6a5a0 <strcpy@@GLIBC_2.4>
69622: 4620 mov r0, r4
69624: bd38 pop {r3, r4, r5, pc}
--
9f520: 76c0 strb r0, [r0, #27]
9f522: 0005 movs r5, r0
9f524: 7652 strb r2, [r2, #25]
9f526: 0005 movs r5, r0
9f528: 7690 strb r0, [r2, #26]
9f52a: 0005 movs r5, r0
0009f52c <getwd@@GLIBC_2.4>:
9f52c: b198 cbz r0, 9f556 <getwd@@GLIBC_2.4+0x2a>
9f52e: b530 push {r4, r5, lr}
9f530: f5ad 5d80 sub.w sp, sp, #4096 ; 0x1000
9f534: b081 sub sp, #4
9f536: 4604 mov r4, r0
9f538: 466d mov r5, sp
9f53a: f44f 5180 mov.w r1, #4096 ; 0x1000
9f53e: 4628 mov r0, r5
9f540: f7ff fd42 bl 9efc8 <getcwd@@GLIBC_2.4>
9f544: b180 cbz r0, 9f568 <getwd@@GLIBC_2.4+0x3c>
9f546: 4629 mov r1, r5
9f548: 4620 mov r0, r4
9f54a: f7cb f829 bl 6a5a0 <strcpy@@GLIBC_2.4>
9f54e: f50d 5d80 add.w sp, sp, #4096 ; 0x1000
9f552: b001 add sp, #4
--
ba162: 9802 ldr r0, [sp, #8]
ba164: 9200 str r2, [sp, #0]
ba166: 9a03 ldr r2, [sp, #12]
ba168: 6827 ldr r7, [r4, #0]
ba16a: 47b8 blx r7
ba16c: 2200 movs r2, #0
ba16e: 4683 mov fp, r0
ba170: e9cd 0200 strd r0, r2, [sp]
ba174: 4623 mov r3, r4
ba176: 4629 mov r1, r5
ba178: 4630 mov r0, r6
ba17a: f00d fbd5 bl c7928 <__nss_next2@@GLIBC_PRIVATE>
ba17e: 2800 cmp r0, #0
ba180: d0e8 beq.n ba154 <ether_ntohost@@GLIBC_2.4+0x34>
ba182: 9b05 ldr r3, [sp, #20]
ba184: f1bb 0f01 cmp.w fp, #1
ba188: 9302 str r3, [sp, #8]
ba18a: d10a bne.n ba1a2 <ether_ntohost@@GLIBC_2.4+0x82>
ba18c: f8d9 1000 ldr.w r1, [r9]
ba190: 9804 ldr r0, [sp, #16]
ba192: f7b0 fa05 bl 6a5a0 <strcpy@@GLIBC_2.4>
ba196: 9b02 ldr r3, [sp, #8]
ba198: 4618 mov r0, r3
--
c1690: 2161 movs r1, #97 ; 0x61
c1692: 447b add r3, pc
c1694: 681b ldr r3, [r3, #0]
c1696: 50d1 str r1, [r2, r3]
c1698: b01d add sp, #116 ; 0x74
c169a: e8bd 8ff0 ldmia.w sp!, {r4, r5, r6, r7, r8, r9, sl, fp, pc}
c169e: 78ca ldrb r2, [r1, #3]
c16a0: ac10 add r4, sp, #64 ; 0x40
c16a2: 788b ldrb r3, [r1, #2]
c16a4: 4620 mov r0, r4
c16a6: e9cd 3200 strd r3, r2, [sp]
c16aa: 784b ldrb r3, [r1, #1]
c16ac: 780a ldrb r2, [r1, #0]
c16ae: 4982 ldr r1, [pc, #520] ; (c18b8 <inet_ntop@@GLIBC_2.4+0x244>)
c16b0: 4479 add r1, pc
c16b2: f77b fa0d bl 3cad0 <_IO_sprintf@@GLIBC_2.4>
c16b6: 4581 cmp r9, r0
c16b8: f240 80dc bls.w c1874 <inet_ntop@@GLIBC_2.4+0x200>
c16bc: 9802 ldr r0, [sp, #8]
c16be: 4621 mov r1, r4
c16c0: f7a8 ff6e bl 6a5a0 <strcpy@@GLIBC_2.4>
c16c4: b01d add sp, #116 ; 0x74
c16c6: e8bd 8ff0 ldmia.w sp!, {r4, r5, r6, r7, r8, r9, sl, fp, pc}
--
c183a: e008 b.n c184e <inet_ntop@@GLIBC_2.4+0x1da>
c183c: 4555 cmp r5, sl
c183e: d09c beq.n c177a <inet_ntop@@GLIBC_2.4+0x106>
c1840: 3501 adds r5, #1
c1842: 2d08 cmp r5, #8
c1844: d1a2 bne.n c178c <inet_ntop@@GLIBC_2.4+0x118>
c1846: f1ba 3fff cmp.w sl, #4294967295 ; 0xffffffff
c184a: d005 beq.n c1858 <inet_ntop@@GLIBC_2.4+0x1e4>
c184c: 4457 add r7, sl
c184e: 2f08 cmp r7, #8
c1850: bf04 itt eq
c1852: 233a moveq r3, #58 ; 0x3a
c1854: f804 3b01 strbeq.w r3, [r4], #1
c1858: 2300 movs r3, #0
c185a: f804 3b01 strb.w r3, [r4], #1
c185e: 9b03 ldr r3, [sp, #12]
c1860: 1ae4 subs r4, r4, r3
c1862: 45a1 cmp r9, r4
c1864: d30f bcc.n c1886 <inet_ntop@@GLIBC_2.4+0x212>
c1866: e9dd 0102 ldrd r0, r1, [sp, #8]
c186a: f7a8 fe99 bl 6a5a0 <strcpy@@GLIBC_2.4>
c186e: b01d add sp, #116 ; 0x74
c1870: e8bd 8ff0 ldmia.w sp!, {r4, r5, r6, r7, r8, r9, sl, fp, pc}
--
c7efc: bf14 ite ne
c7efe: 2401 movne r4, #1
c7f00: 2400 moveq r4, #0
c7f02: f482 5280 eor.w r2, r2, #4096 ; 0x1000
c7f06: ea14 3412 ands.w r4, r4, r2, lsr #12
c7f0a: d1d2 bne.n c7eb2 <__nss_lookup_function@@GLIBC_PRIVATE+0x4ee>
c7f0c: f810 4f01 ldrb.w r4, [r0, #1]!
c7f10: 2c00 cmp r4, #0
c7f12: d1ed bne.n c7ef0 <__nss_lookup_function@@GLIBC_PRIVATE+0x52c>
c7f14: f810 3c01 ldrb.w r3, [r0, #-1]
c7f18: 2b2e cmp r3, #46 ; 0x2e
c7f1a: d0ca beq.n c7eb2 <__nss_lookup_function@@GLIBC_PRIVATE+0x4ee>
c7f1c: 464a mov r2, r9
c7f1e: 4629 mov r1, r5
c7f20: 200a movs r0, #10
c7f22: f7f9 fdcd bl c1ac0 <inet_pton@@GLIBC_2.4>
c7f26: 2800 cmp r0, #0
c7f28: ddb5 ble.n c7e96 <__nss_lookup_function@@GLIBC_PRIVATE+0x4d2>
c7f2a: 4629 mov r1, r5
c7f2c: 4658 mov r0, fp
c7f2e: f7a2 fb37 bl 6a5a0 <strcpy@@GLIBC_2.4>
c7f32: 9a00 ldr r2, [sp, #0]
c7f34: 2300 movs r3, #0
--
c7faa: 6013 str r3, [r2, #0]
c7fac: 9b11 ldr r3, [sp, #68] ; 0x44
c7fae: b11b cbz r3, c7fb8 <__nss_lookup_function@@GLIBC_PRIVATE+0x5f4>
c7fb0: 9a11 ldr r2, [sp, #68] ; 0x44
c7fb2: f04f 33ff mov.w r3, #4294967295 ; 0xffffffff
c7fb6: 6013 str r3, [r2, #0]
c7fb8: 4b2a ldr r3, [pc, #168] ; (c8064 <__nss_lookup_function@@GLIBC_PRIVATE+0x6a0>)
c7fba: ee1d 2f70 mrc 15, 0, r2, cr13, cr0, {3}
c7fbe: 2122 movs r1, #34 ; 0x22
c7fc0: 447b add r3, pc
c7fc2: 681b ldr r3, [r3, #0]
c7fc4: 50d1 str r1, [r2, r3]
c7fc6: e770 b.n c7eaa <__nss_lookup_function@@GLIBC_PRIVATE+0x4e6>
c7fc8: 4649 mov r1, r9
c7fca: 4628 mov r0, r5
c7fcc: f7f9 fb28 bl c1620 <__inet_aton_exact@@GLIBC_PRIVATE>
c7fd0: 2800 cmp r0, #0
c7fd2: f43f af60 beq.w c7e96 <__nss_lookup_function@@GLIBC_PRIVATE+0x4d2>
c7fd6: 4629 mov r1, r5
c7fd8: 4658 mov r0, fp
c7fda: f7a2 fae1 bl 6a5a0 <strcpy@@GLIBC_2.4>
c7fde: 9a00 ldr r2, [sp, #0]
c7fe0: 2300 movs r3, #0
--
d9732: 6812 ldr r2, [r2, #0]
d9734: b132 cbz r2, d9744 <openpty@@GLIBC_2.34+0x94>
d9736: f245 4114 movw r1, #21524 ; 0x5414
d973a: 4658 mov r0, fp
d973c: 9301 str r3, [sp, #4]
d973e: f7cc fd6d bl a621c <__ioctl_time64@@GLIBC_2.34>
d9742: 9b01 ldr r3, [sp, #4]
d9744: f8ca 4000 str.w r4, [sl]
d9748: f8c9 b000 str.w fp, [r9]
d974c: b177 cbz r7, d976c <openpty@@GLIBC_2.34+0xbc>
d974e: 781a ldrb r2, [r3, #0]
d9750: b932 cbnz r2, d9760 <openpty@@GLIBC_2.34+0xb0>
d9752: 1f29 subs r1, r5, #4
d9754: 4620 mov r0, r4
d9756: f7ff ff69 bl d962c <logwtmp@@GLIBC_2.34+0x84>
d975a: b990 cbnz r0, d9782 <openpty@@GLIBC_2.34+0xd2>
d975c: f855 3c04 ldr.w r3, [r5, #-4]
d9760: 4619 mov r1, r3
d9762: 4638 mov r0, r7
d9764: 9301 str r3, [sp, #4]
d9766: f790 ff1b bl 6a5a0 <strcpy@@GLIBC_2.4>
d976a: 9b01 ldr r3, [sp, #4]
d976c: 42ab cmp r3, r5
[*] Function strcpy used 12 times libc.so.6
