[*] Binary protection state of ntpconfd
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of ntpconfd
b.w 0x1bdc
str r4, [r0, 0x2c]
movs r0, r0
cbz r2, 0x21f8
movs r0, r0
cbz r2, 0x21ee
movs r0, r0
cbz r0, 0x21d6
ldr r1, [0x000021f4]
movs r2, 0
push {r4, r5, r6, lr}
add r1, pc
blx sym.imp.g_variant_ref_sink
mov r6, r0
cbz r0, 0x21dc
ldr r3, [r0]
mov r5, r0
movs r4, 0
cbz r3, 0x21dc
mov r0, r3
blx sym.imp.g_strdup_printf
mov r1, r0
mov r0, r4
blx sym.imp.g_variant_new_int32
ldr r3, [r5, 4]!
mov r4, r0
cmp r3, 0
bne 0x21b2
mov r0, r6
blx sym.imp.g_list_free_full
cbz r4, 0x21e0
mov r0, r4
pop {r4, r5, r6, pc}
mov r1, r0
b.w 0x1b40
blx sym.imp.g_list_free_full
ldr r0, [0x000021f8]
add r0, pc
blx sym.imp.g_strdup_printf
pop.w {r4, r5, r6, lr}
mov r1, r0
--
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
sub sp, 0xc
ldrd fp, sl, [sp, 0x30]
ldr.w sb, [sp, 0x38]
cmp r0, 0
beq 0x2a96
mov r5, r1
cmp r1, 0
beq 0x2aae
mov r6, r2
cmp r2, 0
beq 0x2ac8
mov r8, r3
cmp r3, 0
beq 0x2ae2
mov r7, r0
movs r0, 0x1c
blx 0x1ea8
mov r4, r0
mov r0, r7
blx sym.imp.g_strdup_printf
str r0, [r4]
mov r0, r5
blx sym.imp.g_strdup_printf
str r0, [r4, 4]
mov r0, r6
blx sym.imp.g_strdup_printf
str r0, [r4, 8]
mov r0, r8
blx sym.imp.g_strdup_printf
str r0, [r4, 0xc]
cmp.w fp, 0
--
beq.w 0x36a0
ldr r1, [0x0000381c]
mov r0, r7
add r1, pc
blx 0x1f5c
cmp r0, 0
beq.w 0x369e
ldr r1, [0x00003820]
mov r0, r7
add r1, pc
blx 0x1f5c
cmp r0, 0
bne.w 0x3768
bl 0x7f58
cmp r0, 0
beq.w 0x3762
cmp r0, 1
beq.w 0x3762
ldr r0, [0x00003824]
add r0, pc
blx sym.imp.g_strdup_printf
str r0, [sp, 8]
blx sym.imp.g_dbus_error_quark
--
ldr r1, [0x00003ef4]
movs r2, 1
mov r0, sl
add r1, pc
blx sym.imp.g_dbus_connection_new_for_address
cmp r0, 0
beq.w 0x3d2c
ldr r2, [0x00003ef8]
mov r0, sl
add r3, sp, 0x10
mov r1, r4
add r2, pc
blx 0x1b18
ldr r0, [sp, 0x10]
cmp r0, 0
beq.w 0x3d40
cmp r0, 1
beq.w 0x3d40
ldr r0, [0x00003efc]
add r0, pc
blx sym.imp.g_strdup_printf
str r0, [sp, 8]
b 0x3920
--
cbz r3, 0x4310
movs r5, 0
mov r0, r4
add r1, sp, 8
add r3, sp, 0x10
add r2, sp, 0xc
str r5, [sp, 8]
str r5, [sp, 0x10]
bl 0x2d04
ldr r0, [sp, 8]
mov r1, r8
blx 0x1f5c
cmp r0, 0
bne 0x4362
cbnz r7, 0x430a
bl 0x7f04
cmp r0, 0
beq 0x439c
ldr r0, [0x00004430]
add r0, pc
blx sym.imp.g_strdup_printf
mov r3, r0
mov r0, r6
--
mov r1, r3
str r3, [sp, 4]
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
b.w sym.imp.g_spawn_sync
ldr r0, [sp, 8]
mov r1, fp
blx 0x1f5c
cmp r0, 0
beq 0x42e8
ldr r1, [0x00004444]
ldr r0, [sp, 8]
add r1, pc
blx 0x1f5c
cbnz r0, 0x43b4
bl 0x7f58
cmp r0, 0
bne 0x4406
ldr r0, str._sFailed_to_own_D_Bus_name___s_
add r0, pc
blx sym.imp.g_strdup_printf
mov r3, r0
ldr r1, [0x0000444c]
mov r0, r6
movs r2, 4
add r1, pc
bl 0x2cb4
mov r6, r0
b 0x430a
bl 0x7f28
cbz r0, 0x43ae
ldr r0, [0x00004450]
add r0, pc
blx sym.imp.g_strdup_printf
mov r3, r0
b 0x42fc
--
movs r6, 0
b 0x4338
ldr r1, [0x00004460]
ldr r0, [sp, 8]
add r1, pc
blx 0x1f5c
cmp r0, 0
bne 0x430a
bl 0x7f34
bl 0x213c
ldr r1, [0x00004464]
mov r3, r0
movs r2, 4
mov r0, r6
add r1, pc
bl 0x2cb4
mov r6, r0
b 0x430a
ldr r0, [0x00004468]
add r0, pc
blx sym.imp.g_strdup_printf
mov r3, r0
b 0x438c
--
invalid
strh r0, [r3, 0x2a]
movs r0, r0
strh r0, [r4, 0x28]
movs r0, r0
push {r3, r4, r5, lr}
cbnz r0, 0x44a8
ldr r3, [0x000044b8]
add r3, pc
ldr r2, [r3]
lsls r2, r2, 0x1c
bpl 0x44a2
ldr r0, [r3, 4]
cbz r0, 0x4486
ldr r3, [r0]
cbz r3, 0x4486
ldrb r3, [r3]
cbnz r3, 0x44ae
ldr r0, [0x000044bc]
add r0, pc
blx sym.imp.g_strdup_printf
mov r4, r0
mov r0, r4
--
ldr r0, [sp, 0x18]
mov r4, r7
blx 0x1d44
mov r2, sl
mov r1, sb
mov r0, r8
blx sym.imp.net_device_switching_get_active_devices
cmp r0, 0
bne 0x53ae
mov r0, r4
blx 0x1e9c
blx sym.imp.g_main_loop_run
ldr r0, [sp, 0x14]
blx 0x1d5c
ldr r0, [sp, 0x10]
blx 0x1d44
b 0x5364
ldr r0, [r5]
blx 0x1d44
mov r0, r4
blx sym.imp.g_strdup_printf
str r0, [r5]
movs r0, 1
--
str r4, [sp]
add r1, pc
blx 0x1ed8
nop
ldrb r2, [r2, 4]
movs r0, r0
ldrb r4, [r7, 0x10]
movs r0, r0
ldrb r4, [r2, 3]
movs r0, r0
push.w {r4, r5, r6, r7, r8, sb, lr}
sub sp, 0xc
cmp r0, 0
beq 0x55ea
mov r5, r0
movs r0, 0x24
ldr r6, [0x00005600]
blx 0x1ea8
mov r4, r0
mov r0, r5
blx sym.imp.g_strdup_printf
add r6, pc
mov r3, r0
str r3, [r4]
mov r0, r6
blx sym.imp.g_strdup_printf
mov r3, r0
ldr r7, [0x00005604]
str r3, [r4, 0x1c]
mov r0, r6
blx sym.imp.g_strdup_printf
ldr r2, [r4]
add r7, pc
--
strb r2, [r6, 5]
movs r0, r0
strb r0, [r6, 5]
movs r0, r0
str r0, [r4, 0x60]
movs r0, r0
strb r6, [r2]
movs r0, r0
ldr r2, [0x00006640]
ldr r3, [0x00006644]
push.w {r4, r5, r6, r7, r8, lr}
mov r5, r0
add r2, pc
ldr r0, [0x00006648]
sub sp, 0x18
ldr r3, [r2, r3]
add r0, pc
ldr r3, [r3]
str r3, [sp, 0x14]
mov.w r3, 0
blx sym.imp.g_strdup_printf
ldr r3, [0x0000664c]
mov r4, r0
--
mov r7, r0
cmp r0, 0
bne.w 0x65f2
add r0, sp, 0xc
blx sym.imp.g_strv_length
mov r8, r0
cmp r0, 0
bne.w 0x6606
ldr r3, [sp, 0xc]
cmp r3, 0
beq 0x65b0
ldr r0, [r3]
cmp r0, 0
beq 0x65b0
add r1, sp, 0x10
blx sym.imp.g_variant_check_format_string
mov r3, r0
cmp r0, 0
bne 0x659e
ldr r0, [sp, 0x10]
blx sym.imp.g_strdup_printf
mov r8, r0
blx 0x1ddc
--
str r0, [r5]
ldr r3, [0x00007928]
mov r0, r4
mov r1, r7
add r3, pc
str.w sb, [r3]
blx 0x1d04
mov r0, r6
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
ldr r3, [0x0000792c]
movs r1, 0x10
ldr r2, [0x00007930]
movs r0, 0
add r3, pc
add r2, pc
blx 0x1b00
b 0x77e4
cbz r5, 0x786c
ldr r0, [0x00007934]
add r0, pc
blx sym.imp.g_strdup_printf
str r0, [r5]
ldr r3, [0x0000791c]
--
str r0, [r5]
ldr r3, [0x00007adc]
mov r0, r4
mov r1, r7
add r3, pc
str.w sb, [r3, 4]
blx 0x1d04
mov r0, r6
pop.w {r3, r4, r5, r6, r7, r8, sb, pc}
ldr r3, [0x00007ae0]
movs r1, 0x10
ldr r2, [0x00007ae4]
movs r0, 0
add r3, pc
add r2, pc
blx 0x1b00
b 0x79b0
cbz r5, 0x7a38
ldr r0, [0x00007ae8]
add r0, pc
blx sym.imp.g_strdup_printf
str r0, [r5]
ldr r3, [0x00007ad0]
--
ldr r3, [r3]
cbz r3, 0x7b76
ldrb r3, [r3]
cbnz r3, 0x7b7e
ldr r3, [0x00007bc0]
add r3, pc
ldr r3, [r3, 0x14]
cbz r3, 0x7ba6
bl 0x6988
ldr r3, [0x00007bc4]
mov r0, r5
ldr r3, [r6, r3]
mov r1, r3
str r3, [sp, 4]
blx 0x1d04
b 0x7b16
mov r4, r1
cbz r1, 0x7ba0
ldr r0, [0x00007bc8]
add r0, pc
blx sym.imp.g_strdup_printf
str r0, [r4]
movs r0, 0
--
ldr r0, [sp, 0xc]
add r1, pc
blx sym.imp.g_variant_ref_sink
mov r7, r0
cmp r0, 0
beq 0x81fe
ldr.w fp, [r0]
cmp.w fp, 0
beq 0x8204
ldr.w sl, [0x0000821c]
mov r6, r0
ldr.w sb, [0x00008220]
ldr.w r8, [0x00008224]
add sl, pc
add sb, pc
add r8, pc
b 0x81a0
movs r3, 0
mov r0, fp
strb r3, [r4], 1
blx sym.imp.g_strdup_printf
mov r1, r0
mov r0, r5
blx sym.imp.g_variant_new_int32
mov r5, r0
mov r0, r4
blx sym.imp.g_strdup_printf
mov r1, r0
mov r0, r5
[*] Function printf used 24 times ntpconfd
