[*] Binary protection state of mkfs.ext3
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mkfs.ext3
ldr r3, [0x00005f40]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr.w r3, [sp, 0x41c]
eors r2, r3
mov.w r3, 0
bne 0x5f1a
addw sp, sp, 0x424
pop.w {r4, r5, r6, r7, r8, sb, pc}
ldr.w r8, [0x00005f64]
add r8, pc
b 0x5e58
ldr.w sb, [0x00005f68]
add sb, pc
b 0x5e68
ldr r1, [0x00005f6c]
mov r2, r7
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x5e9c
blx 0x3964
--
add sp, 0xc
pop.w {r4, r5, r6, r7, r8, sb, lr}
b.w 0x3328
ldr r3, [0x00006084]
ldr.w r3, [r8, r3]
ldr.w sb, [r3]
blx 0x32b0
ldr r2, [0x0000608c]
mov r3, r0
movs r1, 1
mov r0, sb
add r2, pc
blx sym.imp.ext2fs_bg_itable_unused_set
b 0x5fdc
ldr r1, [0x00006090]
adds r3, r4, r7
subs r3, 1
mov r2, r7
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 1
blx 0x3934
--
add sb, pc
mov.w r1, 0x1000
ldr.w r0, [sb, 0x478]
blx sym.imp.realloc
mov r8, r0
cmp r0, 0
bne.w 0x934c
ldr r2, [sp, 0x10]
ldr r3, [sp, 0x88]
ldr r3, [r3, 0x14]
cbz r2, 0x7a2c
rsbs r0, r2, 0
cmp r0, r3
bhi.w 0x9334
ldr r1, [0x00007cb8]
mov sb, r3
mov r2, r3
movs r0, 1
str r3, [sp, 0x10]
add r1, pc
blx sym.imp.__printf_chk
mov r2, sb
asrs r3, r2, 0xa
--
adr r0, 8
movs r0, r0
adr r0, 8
movs r0, r0
ldr r3, [sp, 0x4c]
movs r2, 0x25
ldr.w r0, [0x00009090]
movs r1, 1
ldr r3, [r3]
add r0, pc
blx sym.imp.ext2fs_namei
ldr.w r6, [r6, 0x438]
ldr r2, [r6]
cbz r2, 0x8a84
ldr.w r8, [0x00009094]
ldr.w sb, [0x00009098]
add r8, pc
add sb, pc
mov r1, r8
movs r0, 1
blx sym.imp.__printf_chk
ldr r3, [r6, 4]!
cbz r3, 0x8a84
--
b 0x8616
mov r0, r7
blx 0x347c
mul r2, r8, r1
mov r3, r5
mla r2, r0, r6, r2
umull r0, r1, r8, r0
add r1, r2
ldr r2, [sp, 0x30]
bl 0x11ff8
mov r3, r0
b 0x85be
mov r0, r6
blx sym.imp.e2p_get_encoding_flags
strh.w r0, [r5, 0x28e]
b.w 0x82b2
ldr.w r1, [0x000090e4]
mov r2, r4
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
ldr.w r1, [0x000090e8]
mov r0, r4
--
cmp r0, 0
bne.w 0x78de
ldr r3, [0x00009138]
add r3, pc
ldr.w r3, [r3, 0x43c]
cmp r3, 0
beq.w 0x78de
ldr r4, [0x0000913c]
ldr r3, [0x00009140]
add r4, pc
add r3, pc
mov r1, r4
ldr.w r0, [r3, 0x434]
bl 0x61e8
cmp r0, 0
bne.w 0x78fe
ldr r1, [0x00009144]
mov r2, r4
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x8cb2
ldr r2, [0x00009148]
movs r0, 1
ldr r1, [0x0000914c]
add r2, pc
ldr.w r2, [r2, 0x474]
add r1, pc
blx sym.imp.__printf_chk
ldr r0, [0x00009150]
add r0, pc
--
add r3, pc
b.w 0x7b68
cmp r3, 0
beq.w 0x801e
ldr r3, [sp, 0x18]
movs r2, 0x33
ldr.w r0, [0x000096a0]
movs r1, 1
ldr r3, [r3]
add r0, pc
blx sym.imp.ext2fs_namei
movs r0, 1
blx 0x3934
vmov.i32 d16, 0
vstr d16, [r4]
blx 0x359c
ldr.w r1, [0x000096a4]
movs r0, 1
ldr.w r2, [r6, 0x474]
add r1, pc
blx sym.imp.__printf_chk
b.w 0x7844
bl 0x5dac
--
ldr.w r0, [0x000096bc]
add r0, pc
blx sym.imp.getenv
cmp r0, 0
bne.w 0x79e2
ldr r3, [0x000096c0]
ldr r3, [r7, r3]
ldr r3, [r3]
b.w 0x79f4
ldr r4, [0x000096c4]
mov r0, r3
add r4, pc
mov r1, r4
bl 0x61e8
cmp r0, 0
bne.w 0x78fe
ldr r1, [0x000096c8]
mov r2, r4
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x8ca0
ldr r3, [sp, 0x18]
--
blx 0x33b0
ldr r3, [0x00009958]
ldr r3, [r5, r3]
ldr r0, [r3]
blx 0x33b0
cmp r6, 0
ble 0x991c
ldr r0, [0x0000995c]
add r0, pc
blx 0x33c8
cbnz r0, 0x98f4
ldr r1, [0x00009960]
movs r0, 0xe
add r1, pc
blx sym.imp.signal
ldr r4, [sp, 4]
movs r0, 1
ldr r1, [0x00009964]
mov r2, r4
add r1, pc
blx sym.imp.__printf_chk
mov r0, r4
blx 0x34b8
--
vaddl.s8 q0, d2, d0
lsls r4, r6, 0xf
movs r0, r0
invalid
invalid
invalid
bic.w r2, r0, r0, asr 31
orrs.w r3, r1, r2
bne 0x9d68
bx lr
vmov s15, r1
movs r0, 1
vcvt.f64.u32 d16, s15
vldr d18, [0x00009d94]
ldr r1, [0x00009d98]
push {lr}
sub sp, 0xc
add r1, pc
vdiv.f64 d17, d16, d18
vstr d17, [sp]
blx sym.imp.__printf_chk
add sp, 0xc
ldr pc, [sp], 4
movs r0, r0
movs r0, r0
adds r0, r0, r0
lsrs r5, r6
invalid
mov r2, r1
ldr r1, [0x00009e04]
ldr r3, [0x00009e08]
push {r4, r5, r6, lr}
sub sp, 0x18
add r1, pc
mov r4, r0
ldr r3, [r1, r3]
ldr r3, [r3]
str r3, [sp, 0x14]
mov.w r3, 0
cbz r2, 0x9dc0
ldr r1, [0x00009e0c]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
cbz r4, 0x9de8
ldr r3, [r4, 8]
add r0, sp, 0x10
add.w r6, r4, 0x50
movs r5, 0x20
str r3, [sp, 0x10]
blx 0x350c
ldr r1, [0x00009e10]
add.w r3, r4, 0x10
strd r6, r0, [sp, 4]
movs r2, 0x40
movs r0, 1
str r5, [sp]
add r1, pc
blx sym.imp.__printf_chk
ldr r2, [0x00009e14]
ldr r3, [0x00009e08]
--
ldr r3, [r7]
cmp r3, 0
bne.w 0xab58
ldr.w r3, [0x0000ad3c]
add r3, pc
ldr r3, [r3]
cbz r3, 0xa708
ldr.w r3, [0x0000ad40]
ldr r3, [r2, r3]
ldr r3, [r3]
cbz r3, 0xa708
ldr.w r0, [0x0000ad44]
add r0, pc
blx sym.imp.ext2fs_extent_insert
ldr.w r4, [0x0000ad48]
movs r0, 1
ldr.w r1, [0x0000ad4c]
add r4, pc
ldr r2, [r4, 8]
add r1, pc
blx sym.imp.__printf_chk
ldrd r2, r3, [r4, 0x18]
orrs.w r1, r2, r3
--
mov r0, r5
mov r1, r3
str r3, [sp, 0x2c]
mov r3, sl
str r5, [sp, 0x30]
bl 0x11ff8
mov r5, r0
str r0, [r4, 8]
b 0xa5be
ldr r3, [sp, 0x30]
mov r1, r0
strd r4, r5, [sp, 0x34]
ldrd r8, fp, [r3, 0x28]
mov r3, r0
subs.w r4, r3, r8
sbc.w r7, r2, fp
b 0xa8fc
ldr r1, [0x0000ad9c]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0xa728
adds r5, r4, r6
--
str r2, [r6]
cbnz r3, 0xd10c
lsls r3, r5, 0x1d
bmi 0xd162
movs r0, 1
ldr r2, [0x0000d358]
ldr r3, [0x0000d350]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x8c]
eors r2, r3
mov.w r3, 0
bne.w 0xd32c
add sp, 0x94
pop.w {r4, r5, r6, r7, r8, sb, pc}
ldr r1, [0x0000d35c]
mov r2, r7
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0
b 0xd0f0
--
blx 0x3428
mov r4, r0
cmp r0, 0
beq 0xd294
ldr r1, [0x0000d370]
mov r2, r7
ldr r0, [sp, 0x14]
add r1, pc
blx 0x3428
mov r5, r0
ldr r0, [sp, 0x14]
blx 0x3350
mov r3, r4
cmp r5, 0
beq 0xd2ca
ldr r1, [0x0000d374]
mov r2, r7
movs r0, 1
str r5, [sp]
add r1, pc
blx sym.imp.__printf_chk
ldrb r3, [r4]
cmp r3, 0x65
--
mov.w r2, 0x20000
blx sym.imp.ext2fs_open2
cbnz r0, 0xd250
ldr r3, [sp, 0x18]
ldr r7, [r3, 0x10]
ldr r3, [r7, 0x2c]
cmp r3, 0
beq 0xd2d8
str r3, [sp, 0x1c]
add r0, sp, 0x1c
ldrb.w r3, [r7, 0x88]
cmp r3, 0
beq 0xd2fa
blx 0x350c
ldr r1, [0x0000d37c]
add.w r3, r7, 0x88
str r0, [sp]
movs r2, 0x40
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
mov r0, r6
blx 0x34f4
--
blx 0x332c
b 0xd118
lsls r4, r5, 0x1b
bmi 0xd330
lsls r1, r5, 0x1e
bpl.w 0xd12a
mov.w r2, 0x1b6
movs r1, 0x40
mov r0, r7
blx sym.imp.ext2fs_open_file
subs r4, r0, 0
it lt
ldrlt r0, [sb]
blt.w 0xd12a
lsls r2, r5, 0x1c
bpl.w 0xd0be
ldr r1, [0x0000d380]
mov r2, r7
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0xd0be
ldr r0, [sp, 0x14]
--
ldr.w r0, [r8, r2]
ldr r2, [0x0000d384]
str r7, [sp]
ldr r0, [r0]
add r2, pc
blx sym.imp.ext2fs_bg_itable_unused_set
mov r0, r4
blx sym.imp.blkid_free_probe
b 0xd118
ldr r0, [0x0000d388]
movs r2, 0x45
ldr r3, [r4]
movs r1, 1
add r0, pc
blx sym.imp.ext2fs_namei
b 0xd150
ldr r1, [0x0000d38c]
mov r2, r7
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0xd1ee
ldr.w r3, [r7, 0x108]
cbnz r3, 0xd30c
ldr r3, [r7, 0x30]
cmp r3, 0
beq 0xd24a
add r0, sp, 0x1c
str r3, [sp, 0x1c]
blx 0x350c
ldr r1, [0x0000d390]
mov r2, r0
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0xd24a
blx 0x350c
ldr r1, [0x0000d394]
mov r2, r0
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0xd24a
add r0, sp, 0x1c
str r3, [sp, 0x1c]
blx 0x350c
ldr r1, [0x0000d398]
mov r2, r0
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0xd24a
ldr r0, [0x0000d39c]
[*] Function printf used 23 times mkfs.ext3
