[*] Binary protection state of fwmgr
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of fwmgr
blt 0x42fa
ldr r1, [0x00004324]
ldr r3, [sp, 0xc]
ldr r2, [r7, r1]
subs r3, 0
it ne
movne r3, 1
str r3, [r2]
blx sym.imp.TEEC_FinalizeContext
subs r4, r0, 0
beq 0x4280
blt 0x42fa
ldr r3, [0x00004328]
movs r2, 1
ldr r1, [0x0000432c]
mov r0, r5
add r3, pc
add r1, pc
strb r2, [r3, 8]
str r4, [r3, 4]
blx sym.imp.__strcpy_chk
ldr r2, [0x00004330]
ldr r3, [0x00004318]
--
bne 0x4a20
mov r0, r4
add sp, 0xc
pop {r4, r5, r6, r7, pc}
movs r2, 1
b 0x4954
movs r2, 2
b 0x4954
ldr r1, [0x00004a54]
movs r0, 5
add r1, pc
bl 0x10568
ldr r2, [0x00004a58]
movs r1, 1
mov r0, r1
add r2, pc
bl 0xd4ac
ldr r1, [0x00004a5c]
mov r0, r7
add r1, pc
blx sym.imp.__strcpy_chk
mov r4, r0
b 0x499a
--
cbz r0, 0x4ab8
ldr r2, [0x00004af4]
mov r0, r5
ldr r1, [0x00004af8]
mvn r4, 4
add r2, pc
add r1, pc
blx 0x306c
bl 0x10d54
mov r0, r4
pop {r4, r5, r6, pc}
bl 0x404c
bl 0xda7c
ldr r1, [0x00004afc]
movs r0, 5
add r1, pc
bl 0x10568
ldr r1, [0x00004b00]
mov r0, r6
add r1, pc
blx sym.imp.__strcpy_chk
mov r4, r0
b 0x4ab0
--
ldr r3, [r3]
blx r3
cbnz r0, 0x4b58
ldr r3, [r5]
ldr r3, [r3, 8]
blx r3
cbnz r0, 0x4b58
ldr r3, [0x00004ba4]
ldr r3, [r4, r3]
ldrb r3, [r3]
cbnz r3, 0x4b72
bl 0xea9c
ldr r3, [r5]
movs r0, 1
ldr r3, [r3, 0x28]
blx r3
cbnz r0, 0x4b58
ldr r1, [0x00004ba8]
mov r0, r7
add r1, pc
blx sym.imp.__strcpy_chk
mov r4, r0
b 0x4b6a
--
ldr r3, [r3, 8]
blx r3
cbnz r0, 0x4c18
ldr r3, [0x00004c70]
ldr r3, [r4, r3]
ldrb r3, [r3]
cbnz r3, 0x4c32
bl 0xea9c
ldr r3, [0x00004c74]
ldr r3, [r4, r3]
ldrb r3, [r3]
cbz r3, 0x4c46
ldr r3, [r5]
movs r0, 0
ldr r3, [r3, 0x28]
blx r3
cbnz r0, 0x4c18
ldr r1, [0x00004c78]
mov r0, r7
add r1, pc
blx sym.imp.__strcpy_chk
mov r4, r0
b 0x4c2a
--
blx r3
cbnz r0, 0x4d22
ldr r3, [0x00004e18]
ldr r3, [r4, r3]
ldrb r3, [r3]
cmp r3, 0
beq 0x4dba
ldr r3, [0x00004e1c]
ldr r3, [r4, r3]
ldrb r3, [r3]
cbnz r3, 0x4d0c
ldr r3, [r7]
ldr r3, [r3, 0x24]
blx r3
cbnz r0, 0x4d22
ldrd r0, r1, [sp, 4]
bl 0x95fc
ldr r1, [0x00004e20]
mov r0, r5
add r1, pc
blx sym.imp.__strcpy_chk
mov r4, r0
b 0x4d34
--
ldr r1, [0x00004f14]
mvn r4, 4
add r2, pc
add r1, pc
blx 0x306c
bl 0x10d54
mov r0, r4
add sp, 0xc
pop {r4, r5, r6, r7, pc}
movs r1, 1
bl 0x97e0
cmp r0, 0
bne 0x4e94
ldr r3, [0x00004f18]
mov r0, r7
ldr r1, [0x00004f1c]
ldr r3, [r4, r3]
add r1, pc
mov r2, r3
str r3, [sp, 4]
blx sym.imp.__strcpy_chk
mov r4, r0
b 0x4ea6
--
ldr r2, [r0, r2]
add r0, sp, 4
ldr r2, [r2]
str r2, [sp, 0x1c]
mov.w r2, 0
str r3, [sp, 4]
strd r3, r3, [r0, 4]
strd r3, r3, [r0, 0xc]
str r3, [r0, 0x14]
bl 0x10314
cbnz r0, 0x52b0
ldrb.w r3, [sp, 0xc]
mov r2, r0
cbnz r3, 0x529e
ldrb.w r1, [sp, 0x18]
cbnz r1, 0x5296
mov r2, r3
ldr r1, [0x000052d0]
mov r0, r4
add r1, pc
blx sym.imp.__strcpy_chk
ldr r2, [0x000052d4]
ldr r3, [0x000052cc]
--
mov r0, r5
ldr r1, [0x000053c8]
add r2, pc
add r1, pc
blx 0x306c
rsbs r0, r4, 0
ldr r2, [0x000053cc]
ldr r3, [0x000053b4]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 4]
eors r2, r3
mov.w r3, 0
bne 0x53aa
add sp, 8
pop {r4, r5, r6, pc}
ldr r1, [0x000053d0]
mov r0, r6
add r1, pc
blx sym.imp.__strcpy_chk
b 0x5342
ldr r2, [0x000053d4]
--
mov r2, r6
bl 0xd04c
mov r4, r0
cbz r0, 0x5444
cmp r0, 0x11
beq 0x5478
cmp r0, 0x16
bne 0x5468
ldr r2, [0x000054a8]
mov r0, r5
ldr r1, [0x000054ac]
add r2, pc
add r1, pc
blx 0x306c
rsbs r0, r4, 0
b 0x5450
ldr r1, [0x000054b0]
mov r2, r6
mov r0, r7
add r1, pc
blx sym.imp.__strcpy_chk
ldr r2, [0x000054b4]
ldr r3, [0x000054a4]
--
mov r0, r4
strb r5, [r4, r3]
blx sym.imp.lstat
mov r3, r0
cmp r0, 0
beq 0x581a
strb r5, [r3], 1
movw r2, 0x7553
ldr r1, [r4]
movt r2, 0x6363
cmp r1, r2
beq 0x580a
movs r5, 1
ldr r2, [0x0000585c]
add r2, pc
ldr r0, [r2, 0xc]
cbnz r5, 0x57e8
ldr r1, [0x00005860]
mov r2, r3
add r1, pc
blx sym.imp.__strcpy_chk
cmp r0, 0
blt 0x5838
--
mov r0, r8
ldr r1, [0x00005bac]
add r2, pc
add r1, pc
blx 0x306c
b 0x598e
ldr r2, [0x00005bb0]
mov r0, r8
ldr r1, [0x00005bb4]
add r2, pc
add r1, pc
blx 0x306c
b 0x598e
ldr r3, [0x00005bb8]
mov r0, r4
ldr r1, [0x00005bbc]
ldr.w r3, [fp, r3]
add r1, pc
mov r2, r3
str r3, [sp, 4]
blx sym.imp.__strcpy_chk
mov r4, r0
b 0x5992
--
cmp r5, 0x7c
movs r1, r0
cmp r4, 0xe2
movs r1, r0
cmp r5, 0x10
movs r1, r0
push {r3, r4, r5, lr}
mov r4, r0
movs r0, 0
mov r5, r2
bl 0x10bec
cbnz r0, 0x5c16
ldr r2, [0x00005c2c]
mov r1, r0
movs r0, 1
add r2, pc
bl 0xd4ac
ldr r1, [0x00005c30]
mov r0, r4
add r1, pc
blx sym.imp.__strcpy_chk
mov r4, r0
bl 0x10d54
--
ldr r3, [r3, 8]
blx r3
cmp r0, 0
bne 0x5d30
bl 0x9560
cmp r0, 0
bne 0x5d30
ldr r3, [r6]
movs r0, 0x20
ldr r3, [r3, 0x1c]
blx r3
cmp r0, 0
bne 0x5d30
movs r1, 1
ldr r2, [sp]
mov r0, r1
bl 0xd4ac
ldr r1, [0x00005d90]
mov r0, r4
add r1, pc
blx sym.imp.__strcpy_chk
mov r4, r0
bl 0x10d54
[*] Function strcpy used 14 times fwmgr
