[*] Binary protection state of fwmgr
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function strcat tear down of fwmgr
ldr r3, [0x0000a154]
add r5, sp, 0x94
movs r1, 1
mov.w r2, 0x100
mov r0, r5
strd r8, r4, [sp, 4]
add r3, pc
str r6, [sp]
blx sym.imp.ERR_error_string
ldr r0, [0x0000a158]
movs r1, 0
add r0, pc
blx sym.imp.sd_bus_reply_method_return
cbz r0, 0xa120
ldr r2, [0x0000a15c]
movs r3, 0
mov r1, r6
str r5, [sp]
add r2, pc
mov r0, r2
blx sym.imp.__strcat_chk
cmp r0, 0
it ge
--
movs r1, r0
adds r6, r2, 2
movs r1, r0
adds r4, r1, 1
movs r1, r0
push {r4, r5, lr}
mov r4, r1
sub sp, 0xc
mov r5, r0
movw r1, 0x1ed
mov r0, r4
bl 0x11388
cmp r0, 0
blt 0xa266
ldr r2, [0x0000a270]
mov.w r3, 0x1000
mov r1, r5
mov r0, r4
add r2, pc
str r2, [sp]
blx sym.imp.__strcat_chk
cmp r0, 0
it ge
--
ldr r3, [r3, 0xc]
blx r3
cmp r0, 0
beq 0xa2aa
ldr r5, [0x0000a388]
add r1, sp, 8
add r5, pc
mov r0, r5
blx 0x2d9c
cbz r0, 0xa326
ldr r5, [0x0000a38c]
add r5, pc
ldr r2, [0x0000a390]
mov.w r3, 0x1000
ldr r6, [0x0000a394]
mov r0, r5
add r2, pc
add r6, pc
str r2, [sp]
mov r1, r6
blx sym.imp.__strcat_chk
cmp r0, 0
bge 0xa2aa
--
mov r0, r6
add r2, pc
strd r2, r4, [sp]
add r3, pc
movs r2, 0x40
add r4, sp, 0xe4
blx sym.imp.ERR_error_string
ldr r3, [0x0000a514]
mov.w r2, 0x100
movs r1, 1
mov r0, r4
strd r5, r6, [sp]
add r3, pc
blx sym.imp.ERR_error_string
ldr r2, [0x0000a518]
movs r3, 1
mov r1, r6
str r4, [sp]
add r2, pc
mov r0, r2
blx sym.imp.__strcat_chk
cmp r0, 0
blt 0xa4ee
--
ldr r5, [0x0000a794]
ldr r3, [0x0000a798]
ldr r2, [r2]
str r2, [r0]
mov.w r2, 0
ldr r4, [0x0000a79c]
add r5, pc
ldr r3, [r5, r3]
add r4, pc
ldr r3, [r3]
ldr r3, [r3, 0x68]
blx r3
ldr r2, [0x0000a7a0]
movs r3, 0
ldr r1, [0x0000a7a4]
add r2, pc
add r1, pc
mov r0, r2
str r1, [sp]
mov r1, r4
blx sym.imp.__strcat_chk
cmp r0, 0
blt 0xa74c
--
beq.w 0xb0c8
ldr r3, [sp, 0x1c]
ldr r1, [r5]
mov r0, r3
sub.w r1, r1, 4
clz r1, r1
lsrs r1, r1, 5
blx sl
cmp r0, 0
bne 0xadb8
ldr.w r2, [0x0000b424]
mov r3, r0
ldr.w r7, [0x0000b428]
ldr.w r1, [0x0000b42c]
add r2, pc
add r7, pc
mov r0, r2
add r1, pc
str r1, [sp]
mov r1, r7
blx sym.imp.__strcat_chk
cmp r0, 0
blt.w 0xb2e0
--
ldr r2, [0x0000bbfc]
ldr r3, [0x0000bbdc]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x64]
eors r2, r3
mov.w r3, 0
bne 0xbbd2
add sp, 0x6c
pop {r4, r5, pc}
ldr r2, [0x0000bc00]
movs r3, 8
ldr r4, [0x0000bc04]
ldr r1, [0x0000bc08]
add r2, pc
add r4, pc
mov r0, r2
add r1, pc
str r4, [sp]
blx sym.imp.__strcat_chk
cmp r0, 0
blt 0xbbb6
--
bne 0xbd70
ldr r1, [0x0000bdd0]
ldr r0, [0x0000bdd4]
add r1, pc
add r0, pc
bl 0x1155c
bl 0xbaf4
cmp r0, 0
beq 0xbcba
b 0xbcb4
ldr r2, [0x0000bdd8]
movs r3, 0
ldr r4, [0x0000bddc]
ldr r1, [0x0000bde0]
add r2, pc
add r4, pc
mov r0, r2
add r1, pc
str r1, [sp]
mov r1, r4
blx sym.imp.__strcat_chk
cmp r0, 0
bge 0xbc7a
--
cmp r2, 0x2d
bne 0x12dea
ldr r3, [0x00012fd0]
add.w r4, sp, 0x1160
adds r4, 0x14
movs r2, 0x20
str r1, [sp]
mov r0, r4
add r3, pc
movs r1, 1
ldr r6, [0x00012fd4]
blx sym.imp.ERR_error_string
ldr r2, [0x00012fd8]
movs r3, 0
ldr r1, [0x00012fdc]
add r6, pc
mov r0, r4
str r6, [sp]
add r2, pc
add r1, pc
blx sym.imp.__strcat_chk
cmp r0, 0
blt.w 0x12f7a
--
add.w ip, ip, 0x41
cmp.w lr, 0x80
beq 0x13a4e
ldr.w r3, [r2, ip, lsl 2]
cmp r4, r3
bne 0x139ec
cmp r4, 0x41
mov sl, lr
beq 0x13a58
bic fp, r4, 0xe0
cmp.w fp, 2
beq 0x13a72
ldr r2, [0x00013c24]
mov r3, r7
mov r1, r6
mov r0, r8
add r2, pc
str r2, [sp]
ldr r2, [0x00013c28]
add r2, pc
blx sym.imp.__strcat_chk
cmp r0, 0
bge 0x13a30
--
ldrb r3, [r3]
cbz r3, 0x13a92
subs.w r1, r4, 0x22
mov r0, sl
it ne
movne r1, 1
mov.w fp, 2
bl 0x16fb0
cmp r0, 0
bne 0x13a2a
mov r0, sl
bl 0x17760
cmp r0, 0
beq 0x13a2a
ldr r2, [0x00013c38]
mov r3, r7
str r0, [sp]
mov r1, r6
mov r0, r8
add r2, pc
blx sym.imp.__strcat_chk
cmp r0, 0
blt 0x13a2a
--
blx 0x2db4
mov r4, r0
cmp r0, 0
bne 0x13bc2
ldr r3, [0x00013c44]
movs r2, 0x20
str.w sl, [sp]
add.w sl, sp, 0xac
movs r1, 1
mov r0, sl
add r3, pc
blx sym.imp.ERR_error_string
ldr r3, [0x00013c48]
mov r0, sl
ldr r2, [0x00013c4c]
mov r1, r6
add r3, pc
str r3, [sp]
add r2, pc
mov r3, r7
blx sym.imp.__strcat_chk
mov r3, r0
cmp r0, 0
--
bl 0x64f8
cmp r0, 0
beq.w 0x13a30
b 0x13aca
ldr r1, [0x00013c50]
add r1, pc
mov r2, r8
movs r0, 2
bl 0x10568
mov r0, sb
bl 0x11530
b 0x13a2a
ldr r2, [0x00013c54]
mov r3, r7
mov r1, r6
mov r0, r8
add r2, pc
str r2, [sp]
ldr r2, [0x00013c58]
add r2, pc
blx sym.imp.__strcat_chk
cmp r0, 0
blt.w 0x13a2a
--
cmp r0, 0
bne 0x145c8
ldr r3, [0x000146dc]
add.w r5, sp, 0x1120
adds r5, 4
mov r1, fp
movs r2, 0x20
mov r0, r5
add r3, pc
str r7, [sp]
blx sym.imp.ERR_error_string
ldr r1, [0x000146e0]
mov r3, r8
ldr r2, [0x000146e4]
mov r0, r5
add r1, pc
str r1, [sp]
add r2, pc
ldr r1, [0x000146e8]
add r1, pc
blx sym.imp.__strcat_chk
cmp r0, 0
bge 0x145ce
[*] Function strcat used 14 times fwmgr
