[*] Binary protection state of se051-mngr
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of se051-mngr
movt r4, 0x3c3c
ldr r2, [0x000065ec]
ldr r3, [0x000065e8]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x24]
eors r2, r3
mov.w r3, 0
bne.w 0x65e0
mov r0, r4
add sp, 0x2c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
blx 0x2a18
blx sym.imp.BIO_new
mov sb, r0
cmp r0, 0
beq 0x639c
mov.w r1, 0x100
blx sym.imp.DES_ede3_cbc_encrypt
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov sl, r0
--
movs r2, 0x3c
str r1, [sp, 0x2c]
mov r0, sl
add r6, sp, 0x2c
blx sym.imp.ECDH_compute_key
mov r0, r7
blx 0x2ad8
mov r2, r0
cbz r5, 0x6d60
mov r2, r4
movs r0, 0
mov r3, fp
add r4, sp, 0x28
add.w fp, sp, 0x6c
str r0, [sp, 0x28]
mov r1, r5
mov r0, r7
str.w sb, [sp]
str r4, [sp, 8]
str.w fp, [sp, 4]
blx sym.imp.__sprintf_chk
cmp r0, 0
beq.w 0x6b70
--
cmphi r2, 1
ite ls
movls r2, 1
movhi r2, 0
bhi 0x7830
cbz r0, 0x7800
movs r3, 0
movw r2, 0x1002
str r3, [sp]
movs r1, 0x18
mov.w r3, -1
mov r0, r5
blx sym.imp.RSA_pkey_ctx_ctrl
movs r3, 0
movs r2, 0xf8
str r3, [sp]
mov.w r1, -1
movs r3, 1
mov r0, r5
str r4, [sp, 4]
blx sym.imp.__asprintf_chk
cmp r0, 1
bne 0x773c
--
mov r2, r6
ldr r0, [r4, 8]
ldr r1, [r3, 8]
bl 0x661c
ldr r3, [r4, 4]
ldr r3, [r3, 8]
sub.w r2, r3, 0x33
subs r3, 0x28
cmp r3, 1
it hi
cmphi r2, 2
bhi 0x7924
cbz r0, 0x7906
movs r3, 0
str r0, [sp, 4]
str r3, [sp]
movs r2, 0xf8
movs r3, 1
mov.w r1, -1
mov r0, r6
blx sym.imp.__asprintf_chk
cmp r0, 1
bne 0x7878
--
beq 0x8c74
cmp r3, 0xb
bne 0x8b5c
movs r1, 0
movs r2, 0x3c
add r0, sp, 0x20
str r1, [sp, 0x1c]
blx sym.imp.ECDH_compute_key
ldr r2, [r4, 4]
movs r1, 0x40
add r4, sp, 0x18
str r1, [sp, 0x18]
mov r3, r5
mov r0, sb
ldr r1, [r2, 0x2c]
ldr r2, [r2, 0x18]
str r4, [sp, 8]
add r4, sp, 0x1c
str r7, [sp]
str r4, [sp, 4]
blx sym.imp.__sprintf_chk
cmp r0, 0
beq 0x8b5c
--
blx sym.imp.EVP_PKEY_CTX_free
mov sb, r0
b 0x8bfa
blx sym.imp.BN_free
mov sb, r0
b 0x8bfa
blx sym.imp.EVP_aes_128_ccm
mov sb, r0
b 0x8bfa
blx 0x2a60
mov r3, r0
b 0x8b90
ldr r1, [r4, 4]
add r4, sp, 0x14
mov r3, r5
mov r0, sb
ldr r2, [r1, 0x18]
ldr r1, [r1, 0x2c]
strd r6, r4, [sp, 4]
str r7, [sp]
blx sym.imp.__sprintf_chk
ldr r2, [sp, 0x14]
movs r3, 0
--
cmp ip, r1
bhi.w 0x11bba
mov.w r0, 0x5a5a5a5a
b 0x11bc0
nop
push.w {r4, r5, r6, r7, r8, sb, sl, lr}
mov r7, r2
ldr r2, [0x00011dd0]
mov r6, r3
sub sp, 0x20
movs r4, 0
ldr r3, [0x00011dd4]
mov r5, r1
add r2, pc
mov sl, r0
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x1c]
mov.w r3, 0
strd r4, r4, [sp, 0x10]
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov sb, r0
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
cmp r6, r4
--
ldrh r4, [r1, 0x32]
movs r1, r0
adds r5, 0xb8
movs r1, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov fp, r2
ldr r2, [0x00011ef0]
mov sb, r3
sub sp, 0x2c
mov r5, r1
ldr r3, [0x00011ef4]
mov r6, r0
add r2, pc
ldr.w sl, [sp, 0x50]
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x24]
mov.w r3, 0
movs r3, 0
strd r3, r3, [sp, 0x1c]
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov r7, r0
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
cmp.w fp, 0
[*] Function printf used 10 times se051-mngr
