[*] Binary protection state of busybox.nosuid
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of busybox.nosuid
ldr r0, [0x0000a79c]
mov r1, r5
add r0, pc
bl 0x8a40
sub.w r2, r3, 9
cmp r3, 0x20
it ne
cmpne r2, 4
ite ls
movls r4, 1
movhi r4, 0
bls 0xa696
ldr r3, str.Changing_display_entry_units_to__ss_n
mov r2, r1
add r1, sp, 0x10
add r3, pc
ldr.w sb, [r3]
ldr.w r3, [sb]
str.w r4, [sb]
str r3, [sp, 8]
blx sym.imp.__fprintf_chk
mov r4, r1
ldr.w r1, [sb]
--
sub sp, 0xc
ldr r3, [0x0000a9c0]
add r1, pc
ldr r3, [r1, r3]
ldr r3, [r3]
str r3, [sp, 4]
mov.w r3, 0
cbnz r4, 0xa966
mov r4, sp
ldr r1, [0x0000a9c4]
str r0, [r4]
ldrb r3, [r0]
add r1, pc
ldr r5, [r1]
sub.w r1, r3, 0x30
cmp r1, 9
bhi 0xa9a0
movs r3, 0
mov r1, r4
str r3, [r5]
blx sym.imp.__fprintf_chk
ldr r2, [r4]
bl 0xa910
--
ldr r3, [0x00014040]
mov r5, r0
add r4, pc
mov r0, r1
ldr r3, [r4, r3]
ldr r3, [r3]
str r3, [sp, 0x14]
mov.w r3, 0
bl 0x9728
mov r4, r0
bl 0x40996
mov r0, r4
bl 0x4099c
adds r0, 1
bne 0x13fce
ldr r0, [0x00014044]
add r0, pc
bl 0xa32c
movs r1, 0x3a
mov r0, r7
blx sym.imp.__dprintf_chk
mov r6, r0
cbz r0, 0x13fec
--
bl 0x3d932
str.w sb, [r7, 0x14]
movs r3, 0
mov.w fp, 0x14
strb.w r3, [sl, 0x10]
add.w r3, sl, 0x18
str r3, [r7, 0x18]
b 0x20864
ldrb r3, [r0]
sub.w r2, r3, 0x30
cmp r2, 9
bhi 0x208fc
ldr r3, [0x00020b3c]
movs r2, 0
ldr.w sl, [r7, 0x18]
add.w r1, r7, 0x14
add r3, pc
ldr.w sb, [r3]
str.w r2, [sl, 0x14]
str.w r2, [sb]
blx sym.imp.__fprintf_chk
ldr.w r3, [sb]
strd r0, r1, [sl]
--
ldr r3, [sp, 0x2e8]
movs r2, r0
adds r2, r3, r6
movs r2, r0
adds r2, r2, r6
movs r2, r0
lsls r4, r6, 0x11
movs r0, r0
add r2, sp, 0x3ec
movs r1, r0
add r3, sp, 0x2b4
movs r1, r0
cmp r0, 0x7d
movs r0, r0
invalid
add r3, sp, 0x3c
movs r1, r0
push {r3, r4, r5, lr}
movs r1, 0x2e
mov r5, r0
blx sym.imp.__dprintf_chk
mov r4, r0
cbz r0, 0x24076
ldrb r3, [r0, 1]
adds r0, 1
cmp r3, 0x67
beq 0x24066
ldr r1, [0x0002407c]
movs r4, 0
add r1, pc
blx 0x39c4
cbnz r0, 0x24076
mov r0, r5
bl 0x9374
movs r1, 0x2e
mov r4, r0
blx sym.imp.__dprintf_chk
movw r3, 0x7261
strh r3, [r0, 2]
--
ldrh r6, [r2, 6]
movs r2, r0
lsls r2, r1, 0x1d
movs r2, r0
adr r4, 0x370
movs r2, r0
lsls r4, r6, 0x11
movs r0, r0
lsls r2, r6, 0x1b
movs r2, r0
ldc p15, c15, [sp, 0x3fc]!
lsrs r3, r0, 0x1a
vsli.32 d27, d24, 0x1e
mov r4, r0
ldr r3, [0x0002533c]
add r3, pc
ldr r3, [r3]
lsls r3, r3, 0x1a
bpl 0x2531a
movs r1, 0x2e
blx sym.imp.__dprintf_chk
mov r5, r0
cbnz r0, 0x25328
--
eors r2, r3
mov.w r3, 0
bne.w 0x26a3c
mov r0, r7
add sp, 0x84
pop.w {r4, r5, r6, r7, r8, sb, lr}
b.w 0x3eaac
ldrb r3, [r0, 1]
cmp r3, 0
beq 0x26876
cmp r6, 0
bne.w 0x26b2c
subs.w r8, r8, 1
add.w r4, r4, 1
bne 0x2686a
ldr.w sb, [r7]
tst.w sb, 2
beq 0x268de
movs r1, 0x2f
mov r0, r4
blx sym.imp.__dprintf_chk
mov r8, r0
cbz r0, 0x268de
--
movs r2, r0
lsls r4, r5, 0x11
movs r0, r0
ldrsh r0, [r7, r4]
movs r2, r0
push {r4, r5, lr}
mov r5, r1
ldr r1, [0x00027ca8]
sub sp, 0xc
movs r3, 0
mov r4, r0
ldr r2, [0x00027cac]
add r1, pc
ldr r2, [r1, r2]
mov r1, sp
ldr r2, [r2]
str r2, [sp, 4]
mov.w r2, 0
strb r3, [r0, r5]
movs r2, 8
blx sym.imp.__fprintf_chk
ldr r3, [sp]
ldrb r3, [r3]
--
mov r0, r4
movs r6, 0
ldr r5, [0x0002eb40]
add r1, pc
bl 0xa1b8
ldr r2, [0x0002eb44]
add r5, pc
mov r3, r5
and r7, r0, 1
ldr r3, [r5, r2]
ldr r3, [r3]
add.w r4, r4, r3, lsl 2
ldr r0, [r4]
mov.w r1, 0x900
bl 0x3d75e
subs r5, r0, 0
it lt
movlt r6, 1
blt 0x2eb1c
cbz r7, 0x2eb28
blx sym.imp.__snprintf_chk
cbnz r0, 0x2eb30
mov r0, r5
--
mov.w r3, 0
bl 0x3d706
ldr r3, [0x00038678]
mov r5, r0
ldr r2, [sp, 0x14]
ldr r1, [0x0003867c]
add r3, pc
strb.w r4, [sp, 0x1d]
ldr r1, [r3, r1]
ldrb r3, [r2]
ldr r6, [r1]
cbnz r3, 0x38356
mov sl, r3
mov r0, sl
blx 0x3acc
vdup.32 d16, r5
add.w r3, r6, 0x24
movs r1, 0xa
mov r0, r5
vst1.32 {d16}, [r3]
blx sym.imp.__dprintf_chk
str r0, [sp, 0x14]
cbz r0, 0x38332
--
blx 0x4074
add r4, r0
b 0x3839a
mov r4, r0
b 0x384f4
cmp.w sl, 0
bne 0x38584
mov r0, sl
bl 0x3bb00
mov sl, r0
cbnz r0, 0x385bc
ldr.w sl, [sp, 8]
cmp.w sb, 0x77
str.w sl, [sp, 0x18]
itt eq
moveq r0, sl
moveq fp, 0
beq 0x384b0
movs r1, 0x2f
mov r0, sl
blx sym.imp.__dprintf_chk
mov fp, r0
mov.w sb, 0x57
--
movs r1, r0
lsls r4, r3, 0x11
movs r0, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
mov fp, r1
ldr r1, [0x00038d9c]
sub sp, 0x9c
mov r4, r0
ldr r2, [0x00038da0]
add r1, pc
ldr r3, [0x00038da4]
ldr r7, [0x00038da8]
ldr r2, [r1, r2]
movs r1, 0x2f
add r3, pc
add r7, pc
ldr r2, [r2]
str r2, [sp, 0x94]
mov.w r2, 0
str r3, [sp, 0x90]
blx sym.imp.__dprintf_chk
mov r6, r0
cbnz r0, 0x38b4c
--
bne 0x3a69e
vldr d16, [sp, 0x20]
add.w r3, r4, 0x3c
vst1.32 {d16}, [r3]
cmp.w r8, 0
beq.w 0x3a8b6
ldr r3, [0x0003a9b8]
add.w fp, sp, 0xa4
mov r1, fp
add r3, pc
ldr r0, [r3]
ldrb r3, [r3, 4]
str r0, [r7]
mov r0, sl
strb r3, [r7, 4]
bl 0x4072a
cmp r0, 0
blt.w 0x3a69e
movs r1, 0x29
mov r0, fp
blx sym.imp.__dprintf_chk
movs r3, 0
mov r5, r0
--
str r4, [r7]
cmp r6, 0x5b
mov r5, r1
mov r4, r3
bne 0x3b7fe
add.w sb, r0, 1
movs r1, 0x5d
mov r0, sb
blx 0x4098
mov r6, r0
cmp r0, 0
bne.w 0x3b98c
ldr r0, [0x0003b9a0]
mov r1, r8
add r0, pc
bl 0x8a74
lsls r2, r4, 0x1e
bpl.w 0x3b988
bl 0x8f44
movs r1, 0x3a
blx sym.imp.__dprintf_chk
mov r6, r0
cmp r0, 0
--
cmp r3, 0x2f
bne 0x3bc0c
adds r3, r5, 1
mov r5, r3
ldrb r2, [r3, 1]!
cmp r2, 0x2f
beq 0x3bc02
mov r0, r5
blx 0x4074
subs r3, r0, 1
it ne
addne r0, r0, r5
bne 0x3bc92
movs r3, 1
mov.w sb, 0
ldrb r7, [r5, r3]
movs r1, 0x2f
mov r0, r5
strb.w sb, [r5, r3]
adds r6, r5, r3
blx sym.imp.__dprintf_chk
cmp r0, r5
mov r8, r0
--
bne 0x3d468
mov r5, r8
mov r0, r5
pop.w {r4, r5, r6, r7, r8, pc}
cbz r1, 0x3d4aa
ldrb r3, [r0], 1
cmp r3, 0
bne 0x3d49e
ldrb r3, [r0]
cbnz r3, 0x3d4ac
bx lr
subs r1, 1
beq 0x3d4aa
ldrb r3, [r0], 1
cmp r3, 0
bne 0x3d49e
b 0x3d4a6
push {r4, lr}
movs r1, 0x2f
mov r4, r0
blx sym.imp.__dprintf_chk
cbz r0, 0x3d4c8
adds r4, r0, 1
mov r0, r4
pop {r4, pc}
push {r4, lr}
movs r1, 0x2f
mov r4, r0
blx sym.imp.__dprintf_chk
cbnz r0, 0x3d4dc
mov r0, r4
[*] Function printf used 18 times busybox.nosuid
