[*] Binary protection state of mdnsd

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of mdnsd

bne.w 0x2538
mov r0, r5
add sp, 0x48
pop.w {r4, r5, r6, r7, r8, sb, sl, pc}
movs r2, 0x11
movs r1, 2
blx sym.imp.strncmp
cmp r0, 0
str r0, [r4]
blt 0x211a
cmp.w sl, 0
bne 0x215a
ldrh r3, [r6]
cmp r3, 2
beq.w 0x22d4
cmp r3, 0xa
beq 0x2188
movs r2, 0
ldr r0, [r4]
movs r1, 3
blx sym.imp.__printf_chk
subs r2, r0, 0
bge.w 0x241e
--
blx sym.imp.sigaction
b 0x2206
blx sym.imp.memset
ldr r5, [r0]
mov r8, r0
cmp r5, 0x16
beq.w 0x251a
ldr r0, [0x000025e8]
add r0, pc
blx sym.imp.sigaction
b 0x2290
blx sym.imp.memset
ldr r5, [r0]
ldr r0, [0x000025ec]
add r0, pc
blx sym.imp.sigaction
b 0x2176
ldr r0, [r4]
orr r2, r2, 0x800
movs r1, 4
blx sym.imp.__printf_chk
subs r5, r0, 0
bge.w 0x20f2
--
mov r7, r2
ldr r3, [0x000034f8]
str r5, [r0, 8]
mov r5, r1
ldr r1, [0x000034fc]
movs r0, 0
strh.w r0, [r4, 0x50]
mov r2, r0
str r0, [r4, 0x54]
add r1, pc
ldr r0, [r4, 0x28]
ldr r3, [r1, r3]
movs r1, 3
ldr.w r8, [0x00003500]
ldr r3, [r3]
str r3, [sp, 0x2c]
mov.w r3, 0
ldr r3, [sp, 0x54]
add r8, pc
str r3, [r4, 0x4c]
blx sym.imp.__printf_chk
cmp r0, 0
blt.w 0x348c
orr r2, r0, 0x800
movs r1, 4
ldr r0, [r4, 0x28]
blx sym.imp.__printf_chk
cmp r0, 0
blt.w 0x34ac
--
mov r0, r4
bl 0x29b0
mov r8, r0
cmp r0, 0
bne 0x38c6
movs r1, 8
movs r0, 1
blx 0x11ac
mov r5, r0
cmp r0, 0
beq 0x39c2
str r4, [r0, 4]
mov r2, r8
movs r1, 3
movs r0, 0x10
blx sym.imp.strncmp
subs r6, r0, 0
blt 0x397c
mov.w r2, 0x800
movs r1, 4
blx sym.imp.__printf_chk
movs r3, 0x10
movs r2, 0xc
--
movs r1, 0x6e
mov r0, r7
bl 0x3b4c
mov r1, r5
add.w r5, sp, 0x7a
mov.w r8, 1
movs r2, 0x6c
mov r0, r5
strh.w r8, [sp, 0x78]
bl 0x3ae4
ldrb.w r3, [sp, 0xe8]
cmp r3, 0
bne.w 0x28e36
ldr r5, [r4, 0x34]
ldr r3, [r4, 8]
cmp r5, r3
beq.w 0x28e56
movs r2, 0
movs r1, 3
mov r0, r5
blx sym.imp.__printf_chk
movs r1, 4
orr r2, r0, 0x800
mov r0, r5
blx sym.imp.__printf_chk
cmp r0, 0
bne.w 0x28e74
--
ldr r0, [r1, 0x40]
movs r1, r0
ldr r4, [r3, 0x40]
movs r1, r0
ldr r0, [r4, 0x44]
movs r1, r0
uxtb r6, r2
movs r0, r0
bvc 0x29624
movs r1, r0
ldr r2, [r6, 0x50]
movs r1, r0
uxth r4, r5
movs r0, r0
push {r4, r5, lr}
movs r2, 0
ldr r5, [0x00029770]
sub sp, 0xc
movs r1, 3
mov r4, r0
blx sym.imp.__printf_chk
movs r1, 4
orr r2, r0, 0x800
mov r0, r4
add r5, pc
blx sym.imp.__printf_chk
cbnz r0, 0x29716
movs r1, 0x64
--
push {r4, r5, r6, r7, lr}
sub sp, 0x84
ldr r5, [0x00029910]
movs r3, 0x6e
add r2, sp, 8
add r1, sp, 0xc
ldr r4, [0x00029914]
add r5, pc
ldr r6, [0x00029918]
ldr r4, [r5, r4]
add r6, pc
ldr r4, [r4]
str r4, [sp, 0x7c]
mov.w r4, 0
str r3, [sp, 8]
blx sym.imp.getsockopt
subs r4, r0, 0
blt 0x29862
movs r2, 0
movs r1, 3
blx sym.imp.__printf_chk
movs r1, 4
orr r2, r0, 0x800
mov r0, r4
blx sym.imp.__printf_chk
cmp r0, 0
bne 0x298ae
--
mov r8, r3
sub sp, 0x84
mov r5, r1
ldr r3, [0x0003022c]
add r1, sp, 0x28
add r2, pc
ldr.w sb, [sp, 0xa0]
ldr r3, [r2, r3]
movs r2, 0x1c
ldr r3, [r3]
str r3, [sp, 0x7c]
mov.w r3, 0
mov.w r3, 0x4000
strd r2, r3, [sp, 8]
add r2, sp, 8
blx sym.imp.getsockopt
subs r4, r0, 0
blt.w 0x30142
mov.w r2, 0x800
movs r1, 4
blx sym.imp.__printf_chk
cmp r0, 0
blt.w 0x30154

[*] Function printf used 12 times mdnsd