[*] Binary protection state of httpd

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function strcpy tear down of httpd

cmp r0, 0
bne.w 0x39d52
cmn.w sb, 0xc8
beq.w 0x3a2c0
mov r4, r0
ldr.w r0, [r6, 0xb8]
movs r2, 1
ldr r1, [sp, 0x34]
blx sym.imp.pcre_fullinfo
ldr r0, [sp, 0x30]
blx 0x178d8
cmp r0, 0
bne.w 0x3a232
ldr.w r1, [0x0003a5e8]
ldr.w r0, [r6, 0xb8]
add r1, pc
blx sym.imp.apr_dynamic_fn_retrieve
ldr r2, [sp, 0x30]
ldr.w r1, [r6, 0xb8]
ldr r0, [r6]
blx sym.imp.strcpy
str.w r0, [r6, 0xb8]
b 0x3a232
--
ldr r3, [0x0003edc8]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x2c]
eors r2, r3
mov.w r3, 0
bne 0x3edc0
mov r0, r6
add sp, 0x30
pop.w {r4, r5, r6, r7, r8, sb, sl, pc}
ldr.w r0, [r4, 0xb0]
mov r1, sl
blx sym.imp.apr_dynamic_fn_retrieve
ldr.w r0, [r4, 0xb0]
mov r1, sb
blx sym.imp.apr_dynamic_fn_retrieve
ldr r2, [sp, 0x24]
ldr.w r1, [r4, 0xb0]
ldr r0, [r4]
blx sym.imp.strcpy
str.w r0, [r4, 0xb0]
b 0x3ed50
--
add.w r3, r4, 0xe4
vld1.32 {d16, d17}, [r2]
movs r2, 0x68
vst1.32 {d16, d17}, [r3]
ldr.w r3, [r5, 0xf4]
str.w r3, [r4, 0xf4]
blx 0x180a8
ldrd r1, r3, [r5, 0xc4]
mov r0, r4
str.w r3, [r4, 0xc8]
bl sym.ap_set_content_type
add.w r2, r5, 0xcc
add.w r3, r4, 0xcc
vld1.32 {d16}, [r2]
vst1.32 {d16}, [r3]
ldr.w r3, [r5, 0x100]
ldr.w r2, [r4, 0xc0]
ldr.w r1, [r5, 0xc0]
str.w r3, [r4, 0x100]
ldr r0, [r4]
blx sym.imp.strcpy
ldr.w r2, [r4, 0xb4]
ldr.w r1, [r5, 0xb4]
str.w r0, [r4, 0xc0]
ldr r0, [r4]
blx sym.imp.strcpy
ldr.w r2, [r4, 0xb8]
ldr.w r1, [r5, 0xb8]
str.w r0, [r4, 0xb4]
ldr r0, [r4]
blx sym.imp.strcpy
ldr.w r2, [r4, 0x1d4]
ldr.w r1, [r5, 0x1d4]
str.w r0, [r4, 0xb8]
ldr r0, [r4]
blx sym.imp.strcpy
ldr.w r2, [r4, 0xbc]
ldr.w r1, [r5, 0xbc]
str.w r0, [r4, 0x1d4]
ldr r0, [r4]
blx sym.imp.strcpy
add.w r3, r5, 0x114
str.w r0, [r4, 0xbc]
--
ldr r0, [0x00047610]
str r3, [sp]
movs r3, 6
add r1, pc
strd r6, r4, [sp, 0x10]
str r1, [sp, 8]
add r0, pc
mov.w r1, 0x1ba
str r5, [sp, 4]
bl sym.ap_log_rerror_
b 0x47066
cmp r3, 0
beq 0x474e4
ldr r3, [r3, 4]
cmp r3, 5
bgt 0x473c8
b 0x473f4
mov r1, r7
ldr.w r2, [r5, 0x1d0]
ldr r0, [r5]
blx sym.imp.strcpy
mov r7, r0
b 0x46cba
--
b 0x47742
ldr.w r1, [0x00047f2c]
ldr.w r0, [r5, 0xb4]
add r1, pc
blx sym.imp.apr_dynamic_fn_retrieve
ldr.w r1, [0x00047f30]
ldr.w r0, [r5, 0xb4]
add r1, pc
blx sym.imp.apr_dynamic_fn_retrieve
vmov.i32 d17, 0
add.w r3, r5, 0xcc
vmov.i32 d16, 0
movs r1, 0
str.w r1, [r5, 0xc4]
vst1.32 {d17}, [r3]
str.w r1, [r5, 0x88]
vstr d16, [r5, 0x80]
b 0x477de
ldrd r2, r1, [r5, 0xb4]
ldr r0, [r5]
blx sym.imp.strcpy
str.w r0, [r5, 0xb4]
b 0x47758

[*] Function strcpy used 9 times httpd