[*] Binary protection state of libsystemd.so.0.34.0
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of libsystemd.so.0.34.0
movs r6, r0
adds r7, 0x72
movs r6, r0
push.w {r3, r4, r5, r6, r7, r8, sb, lr}
cmp r0, 0
beq 0x13cee
mov r4, r2
cmp r2, 0
beq 0x13d04
mov r6, r1
mov r7, r0
bl 0x5e204
ldr r1, [0x00013d1c]
adds r0, 1
ands r3, r0, 0x1f
it ne
movne r3, 1
add.w sb, r3, r0, lsr 5
add r1, pc
mov r0, r4
blx sym.imp.__sprintf_chk
add r4, r0
mov r0, r4
--
movs r2, 0
str r3, [r7, 8]
mov.w r1, 0x100000
mov r3, sb
mov r0, r8
bl 0x634e4
cmp r0, 0
blt.w 0x153de
ldr.w fp, [r7, 8]
beq 0x15282
lsls r1, r5, 0x1d
bpl.w 0x153ee
ldr r1, [r7, 4]
mov r0, fp
bl 0x743c4
mov sl, r0
cmp r0, 0
beq.w 0x153ee
ldr.w r1, [0x000159c8]
add r1, pc
blx sym.imp.__sprintf_chk
ldrb.w r3, [sl, r0]
add r0, sl
--
blt 0x153de
ldr.w fp, [r7, 8]
b 0x15272
mov sl, r0
ldr r0, [r7, 8]
blx sym.imp.write
mov r0, r8
bl 0x61d08
b 0x153a8
ands sl, r5, 0x78
beq 0x1547e
ldr.w r1, [0x000159e0]
mov r0, fp
add r1, pc
bl 0x743c4
str r0, [r7]
cmp r0, 0
beq 0x1547e
ldr.w r1, [0x000159e4]
add r1, pc
blx sym.imp.__sprintf_chk
ldr r3, [r7]
add.w r2, r7, 0xc
--
lsls r5, r1, 0x1f
bpl 0x153a4
ldr r0, [r4, 0x44]
str r0, [r7, 0x48]
b 0x15186
lsls r0, r1, 0x1e
bmi.w 0x15588
orrs.w r3, r5, r6
bne.w 0x151b8
b 0x153a4
ands sl, r5, 0x780
beq 0x154cc
ldr.w r1, [0x000159ec]
mov r0, fp
add r1, pc
bl 0x743c4
str r0, [r7]
cbz r0, 0x154cc
ldr.w r1, [0x000159f0]
add r1, pc
blx sym.imp.__sprintf_chk
ldr r3, [r7]
add.w r2, r7, 0xc
--
str r3, [r4, 8]
b 0x1527a
ldr r3, [0x00015a30]
sub sp, 0x18
ldr.w ip, [0x00015a34]
add.w r8, sp, 8
add r3, pc
ldm.w r3, {r0, r1, r2}
add ip, pc
stm.w r8, {r0, r1, r2}
ldm.w ip!, {r0, r1}
str.w r0, [r8, 0xb]
str.w r1, [r8, 0xf]
b 0x15314
ldr.w fp, [0x00015a38]
add fp, pc
movs r3, 0
mov r0, sl
str r3, [r7, 0x18]
mov r1, fp
blx sym.imp.__sprintf_chk
ldrb.w r3, [sl, r0]
add sl, r0
--
cmp r6, 0
beq.w 0x1a980
cmp.w r8, 0
beq.w 0x1a996
mov fp, r0
ldrb r0, [r0]
cmp r0, 0
beq.w 0x1aa1e
mov sb, r3
str r3, [sp, 8]
ldr r3, [0x0001aa4c]
add r5, sp, 0x20
mov r7, fp
strd r6, r8, [sp, 0x10]
add r3, pc
str r3, [sp, 0xc]
ldr r1, [sp, 0xc]
mov r0, r7
movs r4, 0
str r4, [sp, 0x20]
blx sym.imp.__sprintf_chk
add r7, r0
movs r1, 0x3d
--
blt.w 0x2b0a6
ldr r3, [r7, 0x20]
movw r1, 0xd84
mov.w sl, 0
mov.w fp, 1
movs r2, 0x20
movt r1, 0x200
str r0, [r3]
ldr r3, [0x0002b24c]
str r2, [r7, 8]
str r1, [r7, 0x10]
add r3, pc
str r3, [r7, 0x18]
ldr r5, [r7, 0x24]
movs r3, 0
str r3, [r7, 0x28]
mov r1, r6
add.w r3, r5, sl
mov r0, r3
str r3, [r7, 0x1c]
blx sym.imp.__sprintf_chk
mov sb, r0
add r0, sl
--
bhi.w 0x2eba0
add.w r3, r0, 8
bic r3, r3, 7
sub.w sp, sp, r3
movs r3, 0
add.w r5, sp, 0x2f
lsr.w fp, r5, 3
bic r5, r5, 7
strb.w r3, [r0, fp, lsl 3]
cmp r0, 0
beq.w 0x2eb34
mov r1, sb
mov r0, r5
blx 0xe8b0
movs r5, 1
mov sb, r0
ldr.w fp, [0x0002ec3c]
mov r0, sb
add fp, pc
mov r1, fp
blx sym.imp.__sprintf_chk
ldrb.w r3, [sb, r0]
cmp r3, 0
--
mov r8, r0
cmp r0, 0
beq.w 0x2ead4
add.w sb, sl, 1
movs r1, 0x3a
mov r0, sb
blx 0xe294
mov r5, r0
cmp r0, 0
bne.w 0x2e7f2
mov r0, sb
movs r1, 0x2f
blx 0xe294
mov sb, r0
cmp r0, 0
beq.w 0x2e8ec
ldr r1, [0x0002ec74]
add.w sb, sb, 1
mov r0, sb
add r1, pc
blx sym.imp.__sprintf_chk
ldrb.w r3, [sb, r0]
cmp r3, 0
--
mov r0, sb
bl 0x67630
cmp r0, 0
bne.w 0x2ec1a
mov sb, r0
cmp.w r8, 0
bne.w 0x2e8f4
b 0x2ea86
ldrb.w r1, [sb]
cmp r1, 0
bne.w 0x2ec30
mov r0, sb
bl 0x67630
eor r3, r0, 1
orrs r3, r5
uxtb r3, r3
cmp r3, 0
bne.w 0x2ec0a
mov r1, fp
mov r0, sb
blx sym.imp.__sprintf_chk
ldrb.w r3, [sb, r0]
cmp r3, 0
--
subs r2, r5, r4
mov r1, r4
adds r2, 1
blx sym.imp.getegid
sub.w r2, sl, r5
adds r1, r5, 2
subs r2, 2
mov r0, sb
blx sym.imp.getegid
mov r0, sb
bl 0x1922c
mov r8, r0
cmp r0, 0
beq 0x2ebcc
mov r0, sb
blx sym.imp.write
b 0x2e9d0
ldr r1, [0x0002ec8c]
mov r0, r5
add r1, pc
blx sym.imp.__sprintf_chk
ldrb.w r3, [r0, fp, lsl 3]
cmp r3, 0
--
blx sym.imp.setresgid
mov r7, r0
cmp r0, 0
beq.w 0x43410
mov r0, r6
ldr.w sb, [0x0004343c]
blx 0xe81c
ldr r3, [0x00043440]
mov r5, r0
add sb, pc
add.w r8, sp, 0x24
add r3, pc
str r3, [sp, 8]
ldr r3, [0x00043444]
add r3, pc
str r3, [sp, 0xc]
b 0x432d6
add r4, r5
mov r1, sb
mov r0, r4
blx sym.imp.__sprintf_chk
ldrb r3, [r4, r0]
add r4, r0
cmp r3, 0x3d
bne 0x43304
adds r4, 1
mov r1, sb
mov r0, r4
blx sym.imp.__sprintf_chk
ldrb r1, [r4, r0]
add r4, r0
--
mov r0, r6
add sp, 0x10
pop {r4, r5, r6, pc}
ldr r1, [0x00043774]
mov.w r2, 0x18a
ldr r3, [0x00043778]
ldr r0, [0x0004377c]
add r1, pc
add r3, pc
adds r1, 7
add r0, pc
bl 0x68d78
ldr r6, [0x00043780]
add r6, pc
str r6, [sp, 8]
cmp r5, 0
beq.w 0x4374e
ldr r1, [0x00043784]
mov r0, r5
add r1, pc
blx sym.imp.__sprintf_chk
mov.w r3, -1
adds r2, r5, r0
--
b 0x5e492
blx sym.imp.strnlen
nop
b 0x5dd28
movs r3, r0
lsls r4, r6, 0x1c
movs r0, r0
b 0x5e5bc
movs r2, r0
b 0x5ecd0
movs r3, r0
push {r4, r5, r6, lr}
cbz r0, 0x5e526
ldr r6, [0x0005e53c]
mov r4, r0
add r6, pc
b 0x5e502
add r4, r5
mov r1, r6
mov r0, r4
blx sym.imp.__sprintf_chk
add r4, r0
mov r1, r6
--
mov r4, r0
cbz r0, 0x5e7f0
ldrb r3, [r0]
cbnz r3, 0x5e810
movs r0, 0
ldr r2, [0x0005e928]
ldr r3, [0x0005e924]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [r7, 4]
eors r2, r3
mov.w r3, 0
bne.w 0x5e91c
adds r7, 0xc
mov sp, r7
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr.w r8, [0x0005e92c]
add r8, pc
mov r1, r8
blx sym.imp.__sprintf_chk
adds r5, r4, r0
mov r1, r8
--
mov sl, r0
cbnz r0, 0x5e8bc
subs r3, r6, 5
sub.w fp, r6, 0xd
bic r3, r3, 7
mov sb, sp
sub.w sp, sp, r3
mov r2, fp
adds r1, r5, 5
mov r0, sp
blx 0xe8b0
mov r1, sl
mov r0, sp
strb.w sl, [sp, fp]
bl 0x732b8
cmp r0, 0
blt 0x5e8a0
add r5, r6
mov r1, r8
mov r0, r5
blx sym.imp.__sprintf_chk
add r0, r5
mov sp, sb
b 0x5e7f2
ldr r1, [0x0005e938]
movw r2, 0x50c
ldr r3, [0x0005e93c]
ldr r0, [0x0005e940]
add r1, pc
add r3, pc
adds r1, 7
add r0, pc
bl 0x68d78
ldrb r3, [r4]
mov sp, sb
cmp r3, 0
beq 0x5e7f0
mov r1, r8
mov r0, r4
blx sym.imp.__sprintf_chk
adds r5, r4, r0
mov r1, r8
--
blx 0xe0c8
mov r8, r0
cmp r0, 0
bne 0x5e7f0
bic r3, r4, 7
sub.w sb, r6, 0xe
mov r4, sp
sub.w sp, sp, r3
mov r2, sb
add.w r1, r5, 8
mov r0, sp
blx 0xe8b0
mov r0, sp
strb.w r8, [sp, sb]
bl 0x696d4
cbz r0, 0x5e918
ldr r1, [0x0005e94c]
add r5, r6
mov r0, r5
add r1, pc
blx sym.imp.__sprintf_chk
add r0, r5
mov sp, r4
--
movs r1, r0
blt 0x5e9f4
movs r2, r0
b 0x5ea6c
movs r2, r0
strh r6, [r6, 2]
movs r1, r0
push.w {r4, r5, r6, r7, r8, lr}
cbz r0, 0x5ea14
mov r7, r1
cbz r1, 0x5ea2a
mov r4, r0
mov.w r8, 0
ldr r6, [0x0005ea48]
add r6, pc
b 0x5e9ce
add r4, r5
mov r8, r5
mov r1, r6
mov r0, r4
blx sym.imp.__sprintf_chk
adds r5, r4, r0
mov r1, r6
--
ldr r2, [r5, r7]
movs r2, r0
ldm r3!, {r2, r4, r5}
movs r2, r0
ldrh r0, [r4, r0]
movs r2, r0
ldr r2, [0x00060298]
ldr r3, [0x0006029c]
push {r4, r5, r6, r7, lr}
mov r5, r1
add r2, pc
ldr r1, [0x000602a0]
sub sp, 0x14
ldr r3, [r2, r3]
add r7, sp, 0
add r1, pc
mov r6, r0
ldr r3, [r3]
str r3, [r7, 0xc]
mov.w r3, 0
blx sym.imp.__sprintf_chk
subs r3, r0, 1
cmp r3, 0x14
--
bne 0x6879a
ldr r3, [0x00068b44]
add r3, pc
ldr r3, [r3]
orrs r2, r3
ldr r3, [0x00068b48]
add r3, pc
ldrb r3, [r3]
cmp r3, 0
bne.w 0x68ad2
ldr r7, [0x00068b4c]
ldr.w r8, [0x00068b50]
ldr r3, sym.sd_bus_default_flush_close
add r7, pc
str r2, [sp, 0x18]
add r8, pc
add r3, pc
str r3, [sp, 0x3c]
mov r1, r7
mov r0, r4
blx sym.imp.__sprintf_chk
ldrb r3, [r4, r0]
adds r5, r4, r0
--
movs r2, r0
ldrsb r6, [r4, r4]
movs r2, r0
ldrsb r6, [r2, r3]
movs r2, r0
ldr r3, [0x000696d0]
add r3, pc
strb r0, [r3]
bx lr
ldr r1, [0x00069940]
movs r3, r0
push {r4, lr}
mov r4, r0
cbz r0, 0x696e0
ldrb r3, [r0]
cbnz r3, 0x696e2
mov r0, r3
pop {r4, pc}
ldr r1, [0x000696f4]
add r1, pc
blx sym.imp.__sprintf_chk
ldrb r0, [r4, r0]
clz r0, r0
--
str r2, [sp]
mvn r0, 0x63
mov.w r2, -1
bl 0x62c38
adds r3, r0, 2
mov r4, r0
beq 0x6a2e2
cmp r0, 0
blt 0x6a278
ldr r7, [sp, 8]
ldr r1, [0x0006a2fc]
mov r0, r7
add r1, pc
bl 0x743c4
mov r4, r0
cbz r0, 0x6a2a8
ldr r7, [0x0006a300]
mov r0, r4
add r7, pc
mov r1, r7
blx sym.imp.__sprintf_chk
add r4, r0
mov r1, r7
--
str r2, [sp, 0xc]
mov.w r2, 0
str r3, [sp, 8]
cmp r4, 0
beq 0x6adf4
bic r3, r1, 0x70000000
mov r5, r1
cmp r3, 0x10
bhi 0x6ae0a
lsls r0, r1, 3
bpl 0x6ad62
ldr r0, [0x0006ae34]
ldrb r1, [r4]
add r0, pc
blx 0xe294
cmp r0, 0
bne 0x6ade6
ldr r1, [0x0006ae38]
mov r0, r4
add r1, pc
blx sym.imp.__sprintf_chk
lsls r1, r5, 1
mov r3, r0
--
bx r0
movs r2, r0
mov sl, r4
movs r2, r0
ldr r2, [0x0006af94]
ldr r3, [0x0006af98]
push {r4, r5, r6, r7, lr}
movs r6, 0
add r2, pc
sub sp, 0x14
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0xc]
mov.w r3, 0
strd r6, r6, [sp, 4]
cbz r0, 0x6af72
mov r7, r1
ldr r1, [0x0006af9c]
mov r4, r0
add r1, pc
blx sym.imp.__sprintf_chk
add r1, sp, 4
add r0, r4
--
str r2, [sp, 0xc]
mov.w r2, 0
str r3, [sp, 8]
cmp r4, 0
beq 0x6b0fa
bic r3, r1, 0x70000000
mov r5, r1
cmp r3, 0x10
bhi 0x6b110
lsls r0, r1, 3
bpl 0x6b062
ldr r0, [0x0006b138]
ldrb r1, [r4]
add r0, pc
blx 0xe294
cmp r0, 0
bne 0x6b0ec
ldr r1, [0x0006b13c]
mov r0, r4
add r1, pc
blx sym.imp.__sprintf_chk
lsls r1, r5, 1
mov r3, r0
--
mvn r0, 0x63
bl 0x62c38
adds r3, r0, 2
mov r4, r0
ldr r6, [sp, 8]
it eq
mvneq r4, 2
beq 0x6e9cc
cmp r4, 0
blt 0x6e9cc
ldr r1, [0x0006ea18]
mov r0, r6
add r1, pc
bl 0x743c4
mov r4, r0
cbz r0, 0x6e9ec
ldr r6, [0x0006ea1c]
mov r0, r4
add r6, pc
mov r1, r6
blx sym.imp.__sprintf_chk
add r4, r0
mov r1, r6
--
beq 0x6edb4
ldr r3, [0x0006edb8]
mov r8, r0
add r3, pc
str r3, [sp, 4]
cmp r6, 0x40
add.w sl, r5, 1
beq 0x6ed00
mov r5, sl
strb r6, [r4], 1
ldrb r6, [r5]
cmp r6, 0
bne 0x6ece0
movs r3, 0
mov r0, r8
strb r3, [r4]
add sp, 0xc
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r1, [sp, 4]
mov r0, sl
blx sym.imp.__sprintf_chk
cmp r0, 0
beq 0x6ece8
--
bne 0x70a0e
movs r3, 0
strb r3, [r5]
mov r0, r7
pop {r3, r4, r5, r6, r7, pc}
ldrb r1, [r7]
ldr r6, [0x00070a38]
add r6, pc
cmp r1, 0
bne 0x70a0a
mov r5, r7
b 0x70a22
ldr r6, [r4, 0x14]
movs r0, r0
cbz r0, 0x70a58
push {r3, r4, r5, lr}
mov r4, r0
ldr r5, [0x00070a5c]
add r5, pc
mov r1, r5
blx sym.imp.__sprintf_chk
mov r1, r5
add r0, r4
--
cbz r2, 0x7106e
ldrb r3, [r5]
cbz r3, 0x7104a
mov r0, r4
b 0x7102c
ldrb r3, [r5, 1]!
cbz r3, 0x7106a
ldrb.w ip, [r0]
mov r4, r0
adds r0, 1
subs.w r3, ip, r3
it ne
movne r3, 1
cmp.w ip, 0
it eq
orreq r3, r3, 1
cmp r3, 0
beq 0x71026
mov r1, r6
mov r0, r5
blx sym.imp.__sprintf_chk
ldrb r3, [r5, r0]
cbnz r3, 0x71066
mov r1, r6
mov r0, r4
blx sym.imp.__sprintf_chk
ldrb r7, [r4, r0]
clz r7, r7
--
strd r2, r3, [sp, 8]
ldr r2, [0x00072a70]
ldr r3, [0x00072a74]
add r2, pc
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x2c]
mov.w r3, 0
cmp r0, 0
beq.w 0x72a24
ldrd r3, r2, [sp, 8]
orrs r3, r2
beq.w 0x72a3a
ldr r3, [0x00072a78]
mov r8, r1
mov r5, r0
add r3, pc
mov r1, r3
mov r4, r3
str r3, [sp, 0x18]
blx sym.imp.__sprintf_chk
ldr r1, [0x00072a7c]
adds r2, r5, r0
mov r0, r2
mov r5, r2
add r1, pc
bl 0x743c4
mov r6, r0
cbz r0, 0x72814
mov r1, r4
blx sym.imp.__sprintf_chk
ldrb r3, [r6, r0]
cmp r3, 0
--
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x2c]
eors r2, r3
mov.w r3, 0
bne.w 0x72a6c
add sp, 0x34
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r3, [0x00072a84]
mov r4, r0
mov r7, r0
str.w r8, [sp, 0x24]
add r3, pc
str r3, [sp, 0x20]
ldr r3, [0x00072a88]
add r3, pc
str r3, [sp, 0x1c]
mov r0, r5
ldr r1, [sp, 0x18]
blx sym.imp.__sprintf_chk
ldrb r3, [r5, r0]
add r5, r0
--
mov r8, r1
cmp r3, 0
bgt.w 0x72a68
cmp r1, 0
blt 0x72930
ldr r3, [sp, 0x28]
str r3, [sp, 4]
ldrb r3, [r3]
cmp r3, 0x2e
str r3, [sp, 0x10]
ldr r3, [sp, 4]
beq 0x7291c
cmp r3, r5
beq 0x72916
str r3, [sp]
ldr r5, [sp]
mov.w sl, 0
ldr.w sb, [0x00072a8c]
ldr r1, [sp, 0x1c]
mov r0, r5
blx sym.imp.__sprintf_chk
add sb, pc
add r5, r0
--
adds r0, r4, r0
adc.w r7, r1, r7
ldr r1, [sp, 0x10]
mov r4, r0
cmp r1, 0x2e
beq 0x72936
movs r6, 1
b 0x72828
ldr r1, [sp]
ldrd r2, r3, [sp, 8]
cmp r1, r5
bne 0x728ba
ldrb r1, [r5]
cmp r1, 0
beq 0x728ba
mvn r0, 0x15
b 0x727f8
add.w sb, r3, 1
ldr r1, [sp, 0x20]
mov r0, sb
blx sym.imp.__sprintf_chk
add.w r3, sb, r0
str r3, [sp]
--
b 0x73192
and r6, r5, 1
b 0x73192
b 0x72b58
movs r1, r0
b 0x739f4
movs r1, r0
b 0x72b84
movs r1, r0
b 0x73a60
movs r1, r0
push {r4, lr}
mov r4, r0
cbz r0, 0x73288
ldrb r3, [r0]
cbnz r3, 0x7328a
mov r0, r3
pop {r4, pc}
ldr r1, [0x0007329c]
add r1, pc
blx sym.imp.__sprintf_chk
ldrb r0, [r4, r0]
clz r0, r0
--
bne 0x733d2
mov.w r1, -1
mov r0, r4
bl 0x73b7c
cmp r0, 0
beq 0x733d2
mov r1, r6
mov r0, r4
bl 0x70a9c
cmp r0, 0
bne 0x733d2
ldr r1, [0x000734a8]
mov r0, r4
add r1, pc
blx 0xf2fc
cmp r0, 0
bne 0x733d2
ldr r1, [0x000734ac]
mov r0, r4
add r1, pc
blx sym.imp.__sprintf_chk
ldrb r3, [r4, r0]
cmp r3, 0
beq 0x733d2
ldrb r3, [r4]
cmp r3, 0x2d
bne 0x73434
ldr r1, [0x000734b0]
adds r6, r4, 1
mov r0, r6
add r1, pc
blx sym.imp.__sprintf_chk
ldrb r3, [r6, r0]
cmp r3, 0
[*] Function sprintf used 40 times libsystemd.so.0.34.0
