[*] Binary protection state of libext2fs.so.2.4
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function strcat tear down of libext2fs.so.2.4
ldr r2, [0x0000cc40]
sub sp, 0x14
add r1, sp, 4
ldr r3, [0x0000cc44]
add r2, pc
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0xc]
mov.w r3, 0
blx 0xc4ec
mov r4, r0
cbnz r0, 0xcc20
ldr r7, [0x0000cc48]
add r6, sp, 8
add r7, pc
b 0xcc0c
ldr r3, [sp, 8]
mov r2, r7
movs r1, 1
mov r0, r5
blx sym.imp.strcat
ldr r0, [sp, 4]
mov r1, r6
--
ldr r3, [r3, 0x60]
str r3, [r5, 0x60]
ldr r3, [r7, 0x24]
cbz r3, 0xd498
mov r1, r4
mov r0, r6
blx r3
ldr r3, [r7, 8]
lsls r3, r3, 0x1d
bpl 0xd4b6
ldr r7, [r7, 0xc]
cbnz r4, 0xd4c6
ldr r3, [0x0000d4d0]
add r3, pc
ldr r2, [0x0000d4d4]
mov r0, r7
str r3, [sp]
movs r1, 1
mov r3, r6
add r2, pc
blx sym.imp.strcat
mov r0, r4
str r6, [r5, 0xc]
--
ldr r3, [r5, 0x28]
cbz r3, 0xd51c
mov r2, r4
mov r1, r7
mov r0, r6
blx r3
ldr r3, [r5, 8]
lsls r3, r3, 0x1e
bpl 0xd544
ldr r5, [r5, 0xc]
cbnz r4, 0xd54a
ldr r2, [0x0000d554]
add r2, pc
str r2, [sp, 4]
mov r3, r6
ldr r2, [0x0000d558]
mov r0, r5
movs r1, 1
str r7, [sp]
add r2, pc
blx sym.imp.strcat
mov r0, r4
add sp, 0xc
--
cbz r0, 0xd5d2
ldrd fp, ip, [sp, 0x30]
strd fp, ip, [sp]
blx 0xb6a4
ldr r3, [r7, 8]
mov r4, r0
lsls r3, r3, 0x19
bpl 0xd5ca
ldr r7, [r7, 0xc]
cbz r0, 0xd5e4
blx 0xb63c
mov r3, r0
ldrd fp, ip, [sp, 0x30]
mov r0, r7
ldr r2, [0x0000d5ec]
movs r1, 1
str r3, [sp, 0x10]
strd fp, ip, [sp, 8]
add r2, pc
strd r6, r5, [sp]
blx sym.imp.strcat
mov r0, r4
add sp, 0x18
--
cbz r0, 0xd66e
ldrd fp, ip, [sp, 0x30]
strd fp, ip, [sp]
blx 0xb544
ldr r3, [r7, 8]
mov r4, r0
lsls r3, r3, 0x18
bpl 0xd666
ldr r7, [r7, 0xc]
cbz r0, 0xd680
blx 0xb63c
mov r3, r0
ldrd fp, ip, [sp, 0x30]
mov r0, r7
ldr r2, [0x0000d688]
movs r1, 1
str r3, [sp, 0x10]
strd fp, ip, [sp, 8]
add r2, pc
strd r6, r5, [sp]
blx sym.imp.strcat
mov r0, r4
add sp, 0x18
--
ldr r2, [r5]
cmp r2, r3
bne 0xd6e0
ldr r0, [r5, 4]
cbz r0, 0xd6e6
ldr r3, [r0, 4]
ldr r3, [r3, 0x1c]
blx r3
ldr r3, [r5, 8]
mov r4, r0
lsls r3, r3, 0x1c
bpl 0xd6e2
ldr r5, [r5, 0xc]
cbz r0, 0xd6f8
blx 0xb63c
mov r3, r0
ldr r2, [0x0000d700]
movs r1, 1
mov r0, r5
add r2, pc
blx sym.imp.strcat
mov r0, r4
pop {r3, r4, r5, pc}
--
ldr r3, [0x0000d708]
add r3, pc
b 0xd6d0
nop
subs r0, 0x4a
movs r2, r0
adds r7, 0x7c
movs r2, r0
adds r7, 0x76
movs r2, r0
push {r3, r4, r5, lr}
mov r4, r1
ldr r3, [r0, 0x58]
ldr r5, [r3, 0xc]
bl 0xd694
ldr r2, [0x0000d730]
mov r3, r4
movs r1, 1
mov r0, r5
add r2, pc
blx sym.imp.strcat
mov r0, r5
blx 0xb950
--
cmp r0, 0
beq 0xd7cc
ldr r3, [r0, 4]
ldr r3, [r3, 0x24]
cbz r3, 0xd7cc
mov r2, r6
mov r1, r7
blx r3
ldr r3, [r5, 8]
mov r4, r0
lsls r2, r3, 0x1a
bpl 0xd796
ldr r5, [r5, 0xc]
cbnz r0, 0xd7d0
ldr r3, [0x0000d7d8]
add r3, pc
ldr r2, [0x0000d7dc]
movs r1, 1
mov r0, r5
add r2, pc
blx sym.imp.strcat
mov r0, r4
add sp, 0xc
pop {r4, r5, r6, r7, pc}
ldr r0, [r5, 0xc]
mov r3, r7
str r2, [sp]
movs r1, 1
ldr r2, [0x0000d7e0]
add r2, pc
blx sym.imp.strcat
ldr r0, [r5, 4]
cbz r0, 0xd7b8
--
cbz r0, 0xd85e
ldrd fp, ip, [sp, 0x30]
strd fp, ip, [sp]
blx 0xb50c
ldr r3, [r7, 8]
mov r4, r0
lsls r3, r3, 0x17
bpl 0xd856
ldr r7, [r7, 0xc]
cbz r0, 0xd870
blx 0xb63c
mov r3, r0
ldrd fp, ip, [sp, 0x30]
mov r0, r7
ldr r2, [0x0000d878]
movs r1, 1
str r3, [sp, 0x10]
strd fp, ip, [sp, 8]
add r2, pc
strd r6, r5, [sp]
blx sym.imp.strcat
mov r0, r4
add sp, 0x18
--
mov r8, r0
ldr r0, [r0, 0xc]
sub sp, 8
mov r7, r1
mov r5, r3
cmp r0, 0
ble 0xd93e
adds r1, r3, r0
mov r4, r3
movs r6, 0
ldrb ip, [r4], 1
cmp r4, r1
add r6, ip
bne 0xd8cc
mov r3, r2
ldr r2, [0x0000d944]
movs r1, 1
mov r0, r7
str r6, [sp]
add r2, pc
blx sym.imp.strcat
ldr.w r3, [r8, 0xc]
cmp r3, 0
ble 0xd938
ldr.w sl, [0x0000d948]
movs r4, 0
ldr.w sb, [0x0000d94c]
add sl, pc
add sb, pc
b 0xd920
ldrb r3, [r5]
cmp r2, 0xf
ite eq
moveq r6, 0xa
movne r6, 0x20
movs r1, 1
mov r2, sb
mov r0, r7
str r6, [sp]
add r4, r1
adds r5, 1
blx sym.imp.strcat
ldr.w r3, [r8, 0xc]
cmp r4, r3
bge 0xd938
ands r2, r4, 0xf
bne 0xd8fe
mov r3, r4
mov r2, sl
movs r1, 1
mov r0, r7
blx sym.imp.strcat
movs r6, 0x20
ldrb r3, [r5]
--
ldr r2, [sp, 0x30]
mov r3, r4
mov r0, r7
mov r1, r6
blx sb
ldr.w r3, [r8, 8]
lsls r2, r3, 0x1f
bpl 0xd9d0
ldr.w sb, [r8, 0xc]
cbnz r4, 0xda04
ldr r0, [0x0000da1c]
add r0, pc
ldr r3, [sp, 0x30]
movs r1, 1
ldr r2, [0x0000da20]
str r0, [sp, 0xc]
mov r0, sb
str r3, [sp, 8]
add r2, pc
strd r7, r6, [sp]
blx sym.imp.strcat
ldr.w r3, [r8, 0x10]
cbz r3, 0xd9fc
--
mov r4, r0
ldr.w r3, [sb, 0x1c]
cbz r3, 0xda72
mov r2, r4
mov r1, r7
mov r0, r6
blx r3
ldr.w r3, [sb, 8]
lsls r1, r3, 0x1f
bpl 0xda96
ldr.w sl, [sb, 0xc]
cbnz r4, 0xdad2
ldr r0, [0x0000daec]
add r0, pc
ldr r2, sym.ext2fs_add_journal_device
mov r3, r6
strd r7, r0, [sp]
movs r1, 1
mov r0, sl
add r2, pc
blx sym.imp.strcat
ldr.w r3, [sb, 0x10]
subs r2, r6, r3
--
mov r4, r0
ldr.w r3, [sb, 0x20]
cbz r3, 0xdb42
mov r2, r4
mov r1, r7
mov r0, r6
blx r3
ldr.w r3, [sb, 8]
lsls r1, r3, 0x1e
bpl 0xdb66
ldr.w sl, [sb, 0xc]
cbnz r4, 0xdba2
ldr r0, [0x0000dbbc]
add r0, pc
ldr r2, [0x0000dbc0]
mov r3, r6
strd r7, r0, [sp]
movs r1, 1
mov r0, sl
add r2, pc
blx sym.imp.strcat
ldr.w r3, [sb, 0x10]
subs r2, r6, r3
--
ldr r2, [sp, 0x30]
mov r3, r4
mov r0, r7
mov r1, r6
blx sb
ldr.w r3, [r8, 8]
lsls r2, r3, 0x1e
bpl 0xdc44
ldr.w sb, [r8, 0xc]
cbnz r4, 0xdc78
ldr r0, [0x0000dc90]
add r0, pc
ldr r3, [sp, 0x30]
movs r1, 1
ldr r2, [0x0000dc94]
str r0, [sp, 0xc]
mov r0, sb
str r3, [sp, 8]
add r2, pc
strd r7, r6, [sp]
blx sym.imp.strcat
ldr.w r3, [r8, 0x10]
cbz r3, 0xdc70
--
sub sp, 8
ldr.w ip, [0x00010718]
add r4, pc
ldrd r3, r1, [r0, 0x20]
mov r0, r4
ldr.w r0, [r4, ip]
ldr r4, [r2, 0x10]
ldr r2, [r2, 0x14]
ldr r0, [r0]
subs r3, r3, r4
lsr.w r3, r3, 3
sbc.w r1, r1, r2
lsrs r4, r1, 3
ldr r2, [0x0001071c]
orr.w r3, r3, r1, lsl 29
movs r1, 1
adds r3, 5
add r2, pc
adc r4, r4, 0
strd r3, r4, [sp]
blx sym.imp.strcat
add sp, 8
pop {r4, pc}
--
subs r0, r0, r2
ldr.w r2, [fp, 0x14]
sbc.w r1, r1, r2
bl 0x30b1c
ldr r3, [sp, 0x18]
ldr r2, [0x00010e74]
vmov d16, r0, r1
ldr r1, [r3, r2]
ldr r3, [sp, 0x1c]
strd r5, r7, [sp]
str.w sb, [sp, 8]
mov r5, r1
str r3, [sp, 0xc]
ldr r2, [0x00010e78]
ldr r3, [r1]
movs r1, 1
vdiv.f64 d9, d8, d16
add r2, pc
mov r0, r3
str r3, [sp, 0x18]
blx sym.imp.strcat
ldr r3, [sp, 0x10]
movs r1, 1
str.w r8, [sp]
ldr r2, [0x00010e7c]
str r3, [sp, 4]
ldr r3, [r5]
add r2, pc
mov r0, r3
str r3, [sp, 0x10]
blx sym.imp.strcat
ldr r3, [sp, 0x20]
movs r1, 1
ldr r2, [0x00010e80]
str r3, [sp, 8]
ldr r3, [sp, 0x24]
add r2, pc
str r3, [sp, 0xc]
ldr r3, [sp, 0x28]
str r3, [sp]
ldr r3, [sp, 0x14]
str r3, [sp, 4]
ldr r3, [r5]
mov r0, r3
str r3, [sp, 0x10]
blx sym.imp.strcat
str r4, [sp]
ldr r3, [r5]
str r6, [sp, 4]
ldr.w r2, [fp, 0x10]
str r3, [sp, 0x10]
ldrd r3, r1, [fp, 0x20]
ldr.w r4, [fp, 0x14]
ldr r0, [sp, 0x10]
subs r3, r3, r2
ldr r2, [0x00010e84]
sbc.w r1, r1, r4
str r3, [sp, 8]
str r1, [sp, 0xc]
movs r1, 1
add r2, pc
blx sym.imp.strcat
ldr r2, [0x00010e88]
movs r1, 1
ldr r0, [r5]
vstr d9, [sp]
add r2, pc
blx sym.imp.strcat
add sp, 0x34
vpop {d8, d9}
--
add sp, 0x1c
pop {r4, r5, pc}
ldr r0, [0x0001cbcc]
add r0, pc
blx 0xb364
cbz r0, 0x1cb60
movs r1, 0
add r0, sp, 0xc
blx 0xb844
adds r0, 1
beq 0x1cbae
ldr r2, [0x0001cbd0]
ldr r1, [r4, 0x38]
ldr r3, [r4, 0x2c]
ldr r5, [r5, r2]
ldr r2, [0x0001cbd4]
str r1, [sp]
movs r1, 1
ldr r0, [r5]
add r2, pc
blx sym.imp.strcat
ldr r0, [0x0001cbd8]
movs r2, 0x32
--
add sb, pc
add r8, pc
b 0x1ead4
adds r4, 1
cmp r1, r4
bls 0x1eb06
ldr r3, [r5, 0x1c]
ldr.w r2, [r3, r4, lsl 3]
add.w r3, r3, r4, lsl 3
ldr r3, [r3, -0x8]
cmp r3, r2
blo 0x1eace
subs r1, r4, 1
strd r4, r2, [sp, 8]
str r1, [sp]
mov r2, r8
movs r1, 1
str r3, [sp, 4]
mov r0, r6
mov r3, sb
blx sym.imp.strcat
ldr r1, [r5, 0xc]
adds r4, 1
mov r0, r7
cmp r1, r4
bhi 0x1ead4
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, pc}
mov r0, r3
bx lr
ldr r3, [0x0001eb34]
movs r1, 1
ldr r2, [0x0001eb38]
mov r0, r6
add r3, pc
add r2, pc
blx sym.imp.strcat
movw r0, 0xb747
movt r0, 0x7f2b
--
bmi 0x2576e
bx lr
push.w {r4, r5, r6, r7, r8, lr}
mov r7, r2
ldr r3, [r1, 8]
sub sp, 8
mov r6, r1
movs r1, 1
ldr r2, [0x000257cc]
ldr r4, [0x000257d0]
ldr r5, [0x000257d4]
lsls r3, r3, 1
ldr.w r8, [ip, r2]
add r4, pc
adds r3, 1
add r5, pc
mov r2, r4
str r5, [sp]
adds r5, 0x50
ldr.w r0, [r8]
blx sym.imp.strcat
ldr r3, [r6, 8]
mov r2, r4
str r5, [sp]
movs r1, 1
ldr.w r0, [r8]
lsls r3, r3, 1
adds r3, 1
blx sym.imp.strcat
cbz r7, 0x257c2
ldr.w r1, [r8]
--
str r5, [sp, 4]
ldr r2, [r4, 8]
str r2, [sp, 8]
ldrd r0, r1, [r4]
strd r0, r1, [sp, 0x10]
movs r0, 1
ldr r1, [0x00025918]
add r1, pc
blx 0xb370
ldr r3, [r4, 8]
add.w r1, r8, 0x50
ldr r0, [0x0002591c]
ldr r2, [0x00025920]
ldr r0, [r7, r0]
lsls r3, r3, 1
str r1, [sp]
add r2, pc
adds r3, 1
movs r1, 1
ldr r0, [r0]
blx sym.imp.strcat
add sp, 0x18
pop.w {r4, r5, r6, r7, r8, pc}
[*] Function strcat used 29 times libext2fs.so.2.4
