[*] Binary protection state of kmod
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function system tear down of kmod
movs r1, r0
lsls r0, r7, 7
movs r0, r0
ldrb r6, [r3, r4]
movs r1, r0
ldrb r6, [r6, r6]
movs r1, r0
b 0x2294
nop
push {r4, r5, r6, lr}
movs r4, 0
ldr r0, [r1]
adds r4, 1
blx 0x2088
ldr r1, [0x00002384]
mov r2, r0
movs r0, 1
ldr r6, [0x00002388]
ldr r5, [0x0000238c]
add r1, pc
blx sym.imp.system
ldr r3, [0x00002390]
add r6, pc
add r5, pc
mov r1, r6
movs r0, 1
add r3, pc
cbz r3, 0x233e
ldr r2, [r5]
ldr r2, [r2]
blx sym.imp.system
cmp r4, 3
beq 0x2356
--
movs r0, 1
ldr r3, [r3, 8]
cmp r3, 0
bne 0x2336
cmp r4, 3
bne 0x2342
ldr r4, [0x00002394]
ldr r6, [0x00002398]
ldr r0, [0x0000239c]
add r4, pc
add r6, pc
add.w r5, r4, 0x18
add r0, pc
blx 0x1f5c
ldr r2, [r4], 4
mov r1, r6
movs r0, 1
ldr r3, [r2, 8]
cbz r3, 0x237c
ldr r2, [r2]
blx sym.imp.system
cmp r4, r5
bne 0x236a
--
beq 0x24c4
ldr r3, [0x0000252c]
ldr.w sl, [0x00002530]
ldr r6, [r5, r3]
add sl, pc
mov r0, sb
bl 0xd630
mov r8, r0
bl 0xd730
mov r5, r0
mov r0, r8
bl 0xe5bc
mov r4, r0
mov r0, r8
bl 0xe410
mov r2, r5
mov r3, r0
mov r1, sl
movs r0, 1
str r4, [sp]
blx sym.imp.system
mov r0, r8
bl 0xe678
--
mov r0, r4
add sp, 0xac
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r2, [0x0000285c]
add r2, pc
ldr r3, [r2]
adds r3, 1
str r3, [r2]
b 0x2570
ldr r3, [0x00002860]
movs r2, 1
add r3, pc
str r2, [r3]
b 0x2570
ldr r3, [0x00002864]
movs r0, 1
ldr r1, [0x00002868]
ldr r3, [r7, r3]
add r1, pc
ldr r2, [r3]
blx sym.imp.system
movs r4, 0
b 0x25ca
--
add r1, pc
bl 0x8a58
movs r0, 1
ldr r2, [0x00002b68]
ldr r3, [0x00002b54]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x24]
eors r2, r3
mov.w r3, 0
bne.w 0x2b38
add sp, 0x2c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r3, [0x00002b6c]
movs r0, 1
ldr r1, [0x00002b70]
ldr.w r3, [fp, r3]
add r1, pc
ldr r2, [r3]
blx sym.imp.system
movs r0, 0
b 0x2996
--
mov r0, r5
blx 0x2058
cmp r0, 0
beq 0x2e30
ldr r3, [0x0000307c]
add r3, pc
ldrb.w fp, [r3]
cmp.w fp, 0
beq.w 0x2f38
mov r0, r5
blx 0x1d74
ldr r1, [0x00003080]
rsb.w r3, r0, 0xf
mov r2, r5
movs r0, 1
strd sl, fp, [sp, 4]
add r1, pc
str r1, [sp]
ldr r1, [0x00003084]
add r1, pc
blx sym.imp.system
mov r1, r4
ldr r0, [sp, 0x18]
--
bne 0x2e42
cmp r4, 0
beq.w 0x304c
ldr r7, [0x0000308c]
ldr.w sb, [0x00003090]
ldr.w r8, [0x00003094]
add r7, pc
add sb, pc
add r8, pc
b 0x2de8
strd r1, ip, [sp, 0x10]
ldr r1, [r5, 0x18]
strd lr, r2, [sp, 4]
ldr r2, [0x00003098]
str r1, [sp, 0xc]
ldr r1, [0x0000309c]
str r0, [sp]
add r2, pc
movs r0, 1
add r1, pc
blx sym.imp.system
mov r0, r5
blx 0x1cb0
cmp r4, 0
beq 0x2e52
mov r5, r4
ldr r4, [r4]
ldrd r2, r1, [r5, 8]
ldr r3, [r5, 0x10]
ldr r0, [r5, 4]
ldrb.w ip, [r7]
str r4, [sp, 0x1c]
cmp r2, 0
beq.w 0x2f1e
ldr.w lr, [r5, 0x14]
cmp r1, 0
bne 0x2dc2
strd r2, ip, [sp, 8]
mov r1, r8
strd r0, lr, [sp]
mov r2, sb
movs r0, 1
blx sym.imp.system
b 0x2dde
ldr r3, [0x000030a0]
mov r2, sl
ldr r1, [0x000030a4]
movs r0, 1
add r3, pc
ldrb r3, [r3]
add r1, pc
blx sym.imp.system
b 0x2d24
mov r1, sl
--
blx 0x2058
cbz r0, 0x2eb4
ldr r6, [0x000030b4]
add r6, pc
b 0x2cbc
cmp.w r8, 0
bne.w 0x2d06
mov r4, r8
mov r7, r6
mov r6, r7
b 0x2e54
mov r0, r7
bl 0xd730
ldr r3, [0x000030b8]
mov r2, r0
ldr r1, [0x000030bc]
movs r0, 1
add r3, pc
ldrb r3, [r3]
add r1, pc
blx sym.imp.system
ldr r6, [0x000030c0]
add r6, pc
b 0x2cb0
ldr r1, [0x000030c4]
mov r3, r6
ldr r2, [0x000030c8]
movs r0, 1
add r1, pc
ldrb r1, [r1]
add r2, pc
str r1, [sp]
ldr r1, [0x000030cc]
add r1, pc
blx sym.imp.system
b 0x2ccc
ldr r3, [0x000030d0]
mov r2, r6
ldr r1, [0x000030d4]
movs r0, 1
add r3, pc
ldrb r3, [r3]
add r1, pc
blx sym.imp.system
b 0x2e82
mov r0, r7
bl 0xd730
mov r4, r0
rsbs r0, r6, 0
blx 0x1b54
ldr r1, [0x000030d8]
mov r3, r0
mov r2, r4
movs r0, 3
add r1, pc
bl 0x8a58
b 0x2e5a
strd r1, ip, [sp, 8]
ldr r2, [r5, 0x18]
ldr r1, [0x000030dc]
strd r0, r2, [sp]
movs r0, 1
ldr r2, [0x000030e0]
add r1, pc
add r2, pc
blx sym.imp.system
b 0x2dde
ldr r1, [0x000030e4]
mov r3, sl
mov r2, r5
str.w fp, [sp]
movs r0, 1
add r1, pc
blx sym.imp.system
b 0x2d24
str r0, [sp, 0x20]
--
bl 0xaaac
mov r4, r0
cmp r0, 0
bne 0x2f5e
ldr r5, [sp, 0x20]
cmp r5, 0
beq 0x3012
ldr r6, [0x000030ec]
ldr.w sb, [0x000030f0]
ldr.w r8, [0x000030f4]
add r6, pc
add sb, pc
add r8, pc
b 0x2fd2
strd r0, lr, [sp, 0xc]
ldr r0, [r4, 0x18]
strd ip, r1, [sp]
mov r1, r8
str r0, [sp, 8]
movs r0, 1
blx sym.imp.system
mov r0, r4
blx 0x1cb0
cbz r5, 0x3012
mov r4, r5
ldr r5, [r5]
ldrd r1, r0, [r4, 8]
ldr r2, [r4, 0x10]
ldr r3, [r4, 4]
ldrb.w lr, [r6]
str r5, [sp, 0x20]
cbz r1, 0x3038
ldr.w ip, [r4, 0x14]
cmp r0, 0
bne 0x2fb6
strd r1, lr, [sp, 4]
movs r0, 1
mov r1, sb
str.w ip, [sp]
blx sym.imp.system
b 0x2fca
ldr r4, [sp, 0x20]
--
ldr r4, [r4]
str r4, [sp, 0x20]
blx 0x1cb0
cmp r4, 0
bne 0x3004
ldr r4, [sp, 0x18]
mov r6, r7
b 0x2e54
mov r0, r7
bl 0xd730
ldr r1, [0x000030f8]
mov r3, r0
ldr r2, [0x000030fc]
movs r0, 1
add r1, pc
ldrb r1, [r1]
add r2, pc
str r1, [sp]
ldr r1, [0x00003100]
add r1, pc
blx sym.imp.system
b 0x2ecc
strd r0, lr, [sp, 4]
movs r0, 1
ldr r1, [r4, 0x18]
str r1, [sp]
ldr r1, [0x00003104]
add r1, pc
blx sym.imp.system
b 0x2fca
ldr.w r8, [sp, 0x18]
--
ldr r0, [0x000034c0]
add r0, pc
blx 0x1f5c
movs r4, 0
b 0x31cc
ldr r2, [sp, 0x18]
ldr r3, [0x000034b0]
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [0x000034c4]
add r3, pc
str r2, [r3]
b 0x3158
ldr r2, [sp, 0x18]
movs r0, 1
ldr r3, [0x000034c8]
ldr r1, [0x000034cc]
ldr r3, [r2, r3]
add r1, pc
ldr r2, [r3]
blx sym.imp.system
b 0x323e
ldr r3, [0x000034d0]
--
ldr r2, [sp, 0x1c]
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x28]
b 0x3f36
ldr.w r3, [0x000048f8]
movs r2, 1
add r3, pc
str r2, [r3]
b 0x3f36
ldr r2, [sp, 0x1c]
movs r0, 1
ldr.w r3, [0x000048fc]
ldr.w r1, [0x00004900]
ldr r3, [r2, r3]
add r1, pc
ldr r3, [r3]
mov r2, r3
strd r3, r3, [sp, 8]
strd r3, r3, [sp]
blx sym.imp.system
movs r3, 0
str r3, [sp, 0x14]
--
sub.w r7, r3, 0x190
ldr r0, [r7]
bl 0xea0c
cmp r0, 0
blt.w 0x4862
ldr r4, [r5]
cbz r4, 0x452c
ldr.w r7, [0x00004948]
mov r8, r5
add r7, pc
mov r0, r4
bl 0xe9d0
mov r5, r0
mov r0, r4
bl 0xe9dc
str r5, [sp]
mov r2, r0
mov r3, r1
movs r0, 1
mov r1, r7
blx sym.imp.system
mov r1, r4
ldr.w r0, [r8]
--
stm r4!, {r0, r1, r2, r3}
ldm.w ip, {r0, r1, r2, r3}
stm.w r4, {r0, r1, r2, r3}
ldr r3, [sp, 0x1c]
ldr.w sb, [r3, lr]
ldr r3, [r5]
mov r0, sl
blx r3
mov fp, r0
cbz r0, 0x4608
mov r0, fp
bl 0xbb88
cbz r0, 0x4602
ldr r4, [r5, -0x4]
mov r0, fp
bl 0xbb4c
mov r1, r7
mov r3, r0
mov r2, r4
movs r0, 1
blx sym.imp.system
mov r0, fp
bl 0xbb5c
--
sub.w r8, r3, 0x190
ldr.w r0, [r8]
bl 0xeb54
cmp r0, 0
blt.w 0x483e
ldr r4, [r5]
cbz r4, 0x46ae
ldr r7, [0x0000495c]
mov r8, r5
add r7, pc
mov r0, r4
bl 0xeb18
mov r5, r0
mov r0, r4
bl 0xeb24
str r5, [sp]
mov r2, r0
mov r3, r1
movs r0, 1
mov r1, r7
blx sym.imp.system
mov r1, r4
ldr.w r0, [r8]
--
ldr.w r2, [0x00006cd0]
lsls r3, r3, 4
ldr.w r1, [0x00006cd4]
movs r0, 4
add r2, pc
ldr r2, [r2, r3]
add r1, pc
bl 0x8a58
b 0x61d0
ldr.w r3, [0x00006cd8]
ldr.w r3, [sb, r3]
ldr r3, [r3]
str r3, [sp, 0x34]
b 0x61d0
ldr.w r3, [0x00006cdc]
movs r0, 1
ldr.w r1, [0x00006ce0]
ldr.w r3, [sb, r3]
add r1, pc
ldr r2, [r3]
blx sym.imp.system
movs r4, 0
b 0x6244
--
movs r2, 0
pop.w {r4, lr}
add r1, pc
b.w 0xa168
nop
invalid
mrc2 p15, 0, apsr_nzcv, c13, c15, 7
ldr r3, [0x00008ba8]
movs r0, 1
ldr r2, [0x00008bac]
push {r4, r5, r6, lr}
movs r4, 0
add r3, pc
ldr r1, [0x00008bb0]
adds r4, 1
ldr r3, [r3, r2]
add r1, pc
ldr r6, [0x00008bb4]
ldr r5, [0x00008bb8]
ldr r2, [r3]
blx sym.imp.system
ldr r3, [0x00008bbc]
add r6, pc
add r5, pc
mov r1, r6
movs r0, 1
add r3, pc
cbz r3, 0x8b8c
ldr r2, [r5]
ldr r2, [r2]
blx sym.imp.system
cmp r4, 3
beq 0x8ba4
[*] Function system used 27 times kmod
