[*] Binary protection state of request-key
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of request-key
ldr r3, [0x00001568]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 4]
eors r2, r3
mov.w r3, 0
bne 0x155e
add sp, 8
pop.w {r4, r5, r6, lr}
add sp, 0x10
bx lr
ldr r1, [0x00001578]
add r6, sp, 0x1c
str r6, [sp]
mov r3, r6
ldr r2, [r2, r1]
movs r1, 1
ldr r0, [r2]
mov r2, r5
blx sym.imp.__vfprintf_chk
ldr r1, [r4, 4]
cmp r1, 0
--
ldr r2, [r0, r2]
add r1, pc
ldr r4, [sp, 0x10]
ldr r2, [r2]
str r2, [sp, 4]
mov.w r2, 0
cbnz r3, 0x15b2
ldr r3, [0x000015f4]
add r3, pc
ldr r1, [r3, 4]
cbz r1, 0x15c6
movs r0, 1
blx sym.imp.exit
ldr r0, [0x000015f8]
add r3, sp, 0x14
str r3, [sp]
mov r2, r4
ldr r1, [r1, r0]
ldr r0, [r1]
movs r1, 1
blx sym.imp.__vfprintf_chk
b 0x15a4
ldr r0, [0x000015fc]
--
mov sb, r5
sub.w r2, sb, r5
movs r1, 0xa
mov r0, r5
blx sym.imp.memchr
cmp r0, 0
beq 0x24fe
ldr.w r2, [sl]
adds r4, r0, 1
sub.w r8, r4, r5
cmp r2, 0
beq 0x2424
ldr r3, [sp, 0x20]
movs r1, 1
ldr r2, [0x000026b4]
ldr r2, [r3, r2]
mov r3, r8
strd r8, r5, [sp]
ldr r0, [r2]
mov r2, fp
blx sym.imp.__fprintf_chk
b 0x2424
mov r0, r7
--
ldr r2, [0x000026d4]
mov.w r3, 0x200
movs r1, 1
movs r0, 3
str r3, [sp]
add r2, pc
str r5, [sp, 4]
blx sym.imp.__syslog_chk
blx sym.imp.closelog
b 0x2518
ldr r2, [sp, 0x20]
movs r1, 1
ldr r3, [0x000026b4]
ldr r3, [r2, r3]
ldr r2, [0x000026d8]
str r5, [sp, 4]
ldr r0, [r3]
mov.w r3, 0x200
add r2, pc
str r3, [sp]
blx sym.imp.__fprintf_chk
b 0x2510
ldr r0, [0x000026dc]
[*] Function printf used 4 times request-key
