[*] Binary protection state of mod_http2.so
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mod_http2.so
blx loc.imp.apr_brigade_write
ldrb r2, [r6]
ldr r3, [r0]
ldrh.w r3, [r3, r2, lsl 1]
lsls r3, r3, 0x14
bpl 0xd918
mov r7, r8
mov r8, r6
mov r0, r8
blx loc.imp.apr_bucket_immortal_create
subs r6, r0, 0
ble 0xd904
ldr r0, [r4, 0x28]
movs r1, 8
blx loc.imp.apr_thread_mutex_create
strd r7, r6, [r0]
mov r8, r0
ldr.w r6, [sb, 0x40]
cbz r6, 0xd956
mov r0, r5
blx loc.imp.apr_snprintf
mov r3, r8
mov r2, r0
--
cbz r0, 0xe4a0
mov r2, r6
mov r3, r5
bl 0x6078
ldr r0, [r4, 0x34]
cbz r0, 0xe4b0
mov r2, r6
mov r3, r5
pop.w {r4, r5, r6, lr}
b.w 0x4c1c
pop {r4, r5, r6, pc}
nop
movs r0, 0
str r0, [r1]
str r0, [r2]
bx lr
push {r4, r5, r6, lr}
mov r5, r0
mov r6, r2
mov r0, r1
blx loc.imp.apr_snprintf
mov r4, r0
mov r0, r6
blx loc.imp.apr_snprintf
ldr r3, [r5]
add r4, r0
--
cmp r4, r3
sbcs.w r1, r2, r0
it lo
movlo r0, 1
blo 0x1109c
cmp r0, r2
it eq
cmpeq r3, r4
ite ne
movne r0, 1
moveq r0, 0
rsbs r0, r0, 0
ldr r4, [sp], 4
bx lr
nop
push {r4, r5, r6, lr}
mov r6, r0
mov r0, r1
mov r4, r1
mov r5, r2
blx loc.imp.apr_snprintf
cmp r0, 0xa
beq 0x110c6
--
ldr r3, [r4, 0x2c]
strd r7, r6, [r4, 0x24]
b 0x11152
adds r4, r3, 0
movs r1, r0
push.w {r4, r5, r6, r7, r8, lr}
mov r7, r1
ldr r3, [r2]
mov r4, r2
sub sp, 8
ldr r1, [0x00011228]
mov r6, sp
ldr r2, [0x0001122c]
ldr r5, [r3, 4]
add r1, pc
ldr r2, [r1, r2]
mov r0, r5
ldr r2, [r2]
str r2, [sp, 4]
mov.w r2, 0
blx loc.imp.apr_snprintf
mov r1, r6
mov r3, r0
mov r0, r5
str r3, [sp]
blx 0x5168
ldr r3, [r4]
mov r5, r0
ldr.w r8, [r3, 8]
mov r0, r8
blx loc.imp.apr_snprintf
mov r1, r6
str r0, [sp]
mov r0, r8
blx 0x5168
ldr r3, [r4]
eor.w r5, r5, r0, lsr 16
lsls r4, r0, 0x10
ldr.w r8, [r3, 0xc]
mov r0, r8
blx loc.imp.apr_snprintf
mov r1, r6
str r0, [sp]
--
add r2, pc
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x44]
mov.w r3, 0
blx loc.imp.apr_thread_exit
cmp r0, 0
beq 0x11348
mov r7, r0
blx loc.imp.ap_create_conn_config
movs r2, 0
mov r1, r0
mov r0, r7
blx 0x4958
cmp r0, 1
bne 0x11338
ldr.w r3, [r8]
add r4, sp, 4
ldr.w sb, [r3, 4]
mov r0, sb
blx loc.imp.apr_snprintf
mov r1, sb
mov r2, r0
mov r0, r7
blx 0x531c
ldr r1, [0x00011360]
movs r2, 3
mov r0, r7
add r1, pc
blx 0x531c
ldr.w r3, [r8]
ldr.w sb, [r3, 8]
mov r0, sb
blx loc.imp.apr_snprintf
mov r1, sb
mov r2, r0
mov r0, r7
blx 0x531c
ldr.w r3, [r8]
ldr.w r8, [r3, 0xc]
mov r0, r8
blx loc.imp.apr_snprintf
mov r1, r8
mov r2, r0
--
add r0, pc
ldr r3, [r3]
str r3, [sp, 0x4c]
mov.w r3, 0
blx 0x52a4
cbz r0, 0x113c4
ldr.w r2, [0x00011828]
ldr.w r3, [0x00011820]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x4c]
eors r2, r3
mov.w r3, 0
bne.w 0x11710
movs r0, 1
add sp, 0x54
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
mov r7, r0
mov r0, r5
blx loc.imp.apr_snprintf
mov r3, r7
ldr.w r7, [0x0001182c]
--
lsrs r0, r3, 0xe
movs r1, r0
lsrs r0, r6, 0x15
movs r1, r0
ldrh r4, [r3, r5]
movs r1, r0
bl 0x6c06a
push {r4, r5, r6, r7, lr}
mov r4, r2
ldr r2, [0x000120cc]
sub sp, 0x1c
mov r5, r0
mov r0, r1
ldr r3, [0x000120d0]
mov r7, r1
add r2, pc
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x14]
mov.w r3, 0
blx loc.imp.apr_snprintf
mov r6, r0
mov r0, r4
blx loc.imp.apr_snprintf
str r0, [sp, 4]
mov r3, r6
--
beq 0x15d8c
cmp r1, 0x20
it ne
movne r5, 0
beq 0x15dde
ldr r0, [r4, 0x18]
bl 0xfd34
strd r6, r5, [r4, 0xb0]
str.w r0, [r4, 0xa0]
ldrb.w r3, [r4, 0xb8]
bic r3, r3, 3
orr r3, r3, 2
strb.w r3, [r4, 0xb8]
ldr r3, [r4, 8]
ldr r0, [r3, 0x54]
cbnz r0, 0x15d7a
ldr.w r8, [r4, 0x98]
ldr.w sb, [r4, 0xa0]
cbz r5, 0x15d3a
mov r0, r5
blx loc.imp.apr_snprintf
str r0, [sp, 4]
mov r2, sb
--
ldr r0, [r0, 8]
ldr r1, [r3, r1]
ldr r3, [r3, r2]
cmp r0, r1
it ne
cmpne r0, r3
ite ne
movne r0, 1
moveq r0, 0
bx lr
lsrs r6, r5, 0x15
movs r1, r0
lsls r0, r6, 0x12
movs r0, r0
lsls r4, r5, 0x10
movs r0, r0
push {r3, r4, r5, lr}
mov r4, r0
mov r0, r2
mov r5, r1
blx loc.imp.apr_snprintf
ldr r3, [r4]
cmp r0, r3
--
beq.w 0x17a0e
ldr r1, [r3]
cmp r1, 0
beq.w 0x1796c
ldrsb r1, [r1, r6]
cmp r1, 0
blt.w 0x1796c
cmp r1, 5
ble 0x17862
ldr r1, [r2]
mov r0, r4
ldr r3, [r2, 4]
ldr r2, [r4]
str r1, [sp, 0x34]
str r3, [sp, 0x30]
str r2, [sp, 0x2c]
bl 0x16e58
ldr.w sl, [sp, 0x50]
mov sb, r0
mov r0, sl
blx loc.imp.apr_snprintf
ldr r3, [sp, 0x30]
cmp r0, 0x50
--
bl 0x1cf54
cmp r0, 0
bne 0x189f4
ldr r2, [r4, 0x28]
cmp r2, 0
beq.w 0x18cfa
mov r2, r6
mov r1, r5
ldr r0, [r4, 8]
blx loc.imp.apr_table_clear
mov r1, r6
str r0, [sp, 0x28]
bl 0x1bb60
ldr r1, [sp, 0x28]
ldr r0, [r4, 0x28]
blx 0x4bf8
cmp.w sl, 0
beq.w 0x18bd2
cmp r0, 0
beq.w 0x18d32
blx loc.imp.apr_snprintf
ldr r3, [sp, 0x60]
adds r2, r6, 4
--
cbz r3, 0x1b410
ldr r1, [r0, 4]
add r1, r3
b 0x1b402
str r3, [r0, 0xc]
cbz r3, 0x1b410
ldrb r2, [r1, -0x1]!
subs r3, 1
cmp r2, 9
it ne
cmpne r2, 0x20
beq 0x1b3fe
bx lr
bx lr
push {r4, r5, r6, lr}
mov r4, r0
ldr r5, [r0]
mov r6, r2
cbz r1, 0x1b428
mov r0, r1
blx loc.imp.apr_snprintf
add r5, r0
str r5, [r4]
cbz r6, 0x1b432
mov r0, r6
blx loc.imp.apr_snprintf
add r5, r0
ldr r3, [r4, 4]
--
str r2, [sp]
add r0, pc
str r1, [sp, 4]
mov.w r2, -1
movw r1, 0x5a1
blx 0x5180
movs r3, 0x16
mov r0, sb
str r3, [r6, 0xc]
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, pc}
mov r0, r8
blx 0x4994
cbnz r0, 0x1b7c6
add.w r4, r4, r4, lsl 2
mov r0, r5
mov.w sb, 1
lsls r4, r4, 2
str r5, [r7, r4]
add r4, r7
blx loc.imp.apr_snprintf
mov r3, r0
str.w r8, [r4, 4]
str r3, [r4, 8]
mov r0, r8
blx loc.imp.apr_snprintf
mov r3, r0
mov r0, r4
--
movs r0, r0
strh r6, [r4, 0x28]
movs r0, r0
strh r0, [r5, 0x2e]
movs r0, r0
strh r2, [r2, 0x28]
movs r0, r0
strh r4, [r7, 0x2e]
movs r0, r0
strh r2, [r0, 0x28]
movs r0, r0
strh r0, [r4, 0x2e]
movs r0, r0
strh r2, [r6, 0x26]
movs r0, r0
strh r0, [r0, 0x2e]
movs r0, r0
push {r3, r4, r5, r6, r7, lr}
mov r7, r0
ldr r4, [0x0001cf14]
blx loc.imp.apr_snprintf
add r4, pc
mov r5, r0
--
mov r1, r4
mov r0, r5
bl 0x1b728
movs r0, 1
pop {r4, r5, r6, pc}
nop
push {r4, lr}
mov r4, r0
mov r0, r1
bl 0x1cee0
cbnz r0, 0x1cf4e
ldr r3, [r4]
adds r3, 1
str r3, [r4]
movs r0, 1
pop {r4, pc}
nop
push {r3, r4, r5, r6, r7, lr}
mov r7, r0
ldr r6, [0x0001cfb4]
blx loc.imp.apr_snprintf
add r6, pc
mov r5, r0
--
ldr r3, [r4, 4]
cmp r5, r3
bne 0x1cf92
ldr r0, [r4]
mov r1, r7
blx 0x52a4
cmp r0, 0
beq 0x1cf82
adds r4, 8
cmp r4, r6
bne 0x1cf98
movs r0, 0
pop {r3, r4, r5, r6, r7, pc}
push {r1, r2, r4, r5, r7}
movs r0, r0
push {r2, r3, r7}
movs r0, r0
push {r3, r4, r5, r6, r7, lr}
mov r7, r0
ldr r4, [0x0001d01c]
blx loc.imp.apr_snprintf
add r4, pc
mov r5, r0
--
bne 0x1d070
cmp r5, 6
beq 0x1d12a
cmp r5, 4
beq 0x1d0fe
mov r2, r5
mov r1, r7
mov r0, sb
blx loc.imp.apr_table_clear
mov r1, r5
mov r4, r0
bl 0x1bb60
mov r1, r4
mov r0, r8
blx 0x4bf8
ldr r2, [sp, 0x40]
ldr r6, [sp, 0xc]
cbz r2, 0x1d0f2
cmp r0, 0
beq 0x1d11c
blx loc.imp.apr_snprintf
ldr r2, [sp, 0x40]
adds r3, r6, 4
--
cmp r2, r3
bhs 0x1d0f6
movs r0, 0x16
b 0x1d0d8
ldr r4, [0x0001d1a0]
mov r1, r7
add r4, pc
mov r0, r4
blx 0x52a4
ldr r6, [sp, 0xc]
cmp r0, 0
bne 0x1d08e
mov r1, r4
mov r0, r8
blx 0x4bf8
mov r4, r0
cmp r0, 0
beq 0x1d08e
ldr r3, [sp, 0x40]
cbz r3, 0x1d15e
blx loc.imp.apr_snprintf
ldr r2, [sp, 0x40]
add.w r3, r6, 0xa
[*] Function printf used 26 times mod_http2.so
