[*] Binary protection state of chacl

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of chacl

b 0x11b8
nop
push {r3, lr}
movs r2, 7
ldr r3, [0x000012c4]
movs r1, 1
ldr r4, [0x000012c8]
add r3, pc
ldr r0, [0x000012cc]
ldr r5, [r3, r4]
add r0, pc
ldr r4, [0x000012d0]
ldr r3, [r5]
blx sym.imp.fwrite
ldr r2, [0x000012d4]
add r4, pc
ldr r3, [r4]
movs r1, 1
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
ldr r2, [0x000012d8]
movs r1, 1
ldr r3, [r4]
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
ldr r2, [0x000012dc]
movs r1, 1
ldr r3, [r4]
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
ldr r2, [0x000012e0]
movs r1, 1
ldr r3, [r4]
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
ldr r2, [0x000012e4]
movs r1, 1
ldr r3, [r4]
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
ldr r2, [0x000012e8]
movs r1, 1
ldr r3, [r4]
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
ldr r2, [0x000012ec]
movs r1, 1
ldr r3, [r4]
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
ldr r2, [0x000012f0]
movs r1, 1
ldr r3, [r4]
ldr r0, [r5]
add r2, pc
blx sym.imp.__fprintf_chk
movs r0, 1
blx sym.imp.exit
--
cmp r2, 0x2e
bne 0x138c
ldrb.w r2, [sl, 2]
cmp r2, 0
beq 0x135a
mov r0, r5
blx sym.imp.strlen
mov fp, r0
mov r0, sl
blx sym.imp.strlen
add r0, fp
adds r0, 2
blx sym.imp.malloc
mov fp, r0
cmp r0, 0
beq 0x1444
ldr r3, [sp, 0xc]
mov.w r2, -1
movs r1, 1
strd r5, sl, [sp]
blx sym.imp.__sprintf_chk
mov r2, fp
mov r1, r6
--
blx sym.imp.closedir
b 0x1316
ldr r2, [0x000014b4]
add.w r8, r8, 1
ldr r3, [0x000014b8]
ldr.w r2, [sb, r2]
add r3, pc
ldr r6, [r3]
ldr r4, [r2]
blx sym.imp.__errno_location
ldr r0, [r0]
blx sym.imp.strerror
mov r2, r0
mov r3, r6
str r2, [sp, 4]
mov r0, r4
ldr r2, [0x000014bc]
movs r1, 1
str r5, [sp]
add r2, pc
blx sym.imp.__fprintf_chk
mov r0, r8
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r3, [0x000014b4]
add.w r8, r8, 1
ldr.w r3, [sb, r3]
ldr r4, [r3]
ldr r3, [0x000014c0]
add r3, pc
ldr r7, [r3]
blx sym.imp.__errno_location
ldr r0, [r0]
blx sym.imp.strerror
ldr r2, [0x000014c4]
mov r3, r7
str r0, [sp, 4]
movs r1, 1
mov r0, r4
str r5, [sp]
add r2, pc
blx sym.imp.__fprintf_chk
b 0x1328
ldr r2, [0x000014b4]
ldr r3, [0x000014c8]
ldr.w r2, [sb, r2]
add r3, pc
ldr r6, [r3]
ldr r5, [r2]
blx sym.imp.__errno_location
ldr r0, [r0]
blx sym.imp.strerror
ldr r2, [0x000014cc]
mov r4, r0
mov r3, r6
movs r1, 1
mov r0, r5
str r4, [sp]
add r2, pc
blx sym.imp.__fprintf_chk
movs r0, 1
blx sym.imp.exit
blx sym.imp.__errno_location
ldr r0, [r0]
cmp r0, 0x14
beq.w 0x1312
ldr r3, [0x000014b4]
ldr.w r8, [r8]
ldr.w r3, [sb, r3]
ldr r4, [r3]
blx sym.imp.strerror
ldr r2, [0x000014d0]
mov r3, r8
str r0, [sp]
movs r1, 1
mov r0, r4
mov.w r8, 1
add r2, pc
blx sym.imp.__fprintf_chk
b 0x1316
nop

[*] Function printf used 13 times chacl