[*] Binary protection state of mod_proxy_http.so
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mod_proxy_http.so
cbz r0, 0x1d22
ldr r2, [sp, 0x20]
movs r1, 2
ldr r0, [sp, 0x3c]
blx loc.imp.apr_bucket_immortal_create
str r6, [r0]
ldr r3, [r4, 8]
str r3, [r0, 4]
ldr r3, [r4, 8]
str r0, [r3]
str r0, [r4, 8]
movs r7, 1
b 0x1c64
strd r2, r0, [sp]
add r3, sp, 0x48
ldr r2, [0x00001e28]
movs r1, 0x14
mov r0, r3
str r3, [sp, 0x30]
add r2, pc
blx loc.imp.apr_snprintf
ldr r3, [sp, 0x30]
mov r1, r0
--
ldrb r3, [r0]
cmp r3, 0
beq 0x21e6
ldr r5, [0x000023cc]
movs r1, 0
ldr r0, [0x000023d0]
movs r3, 3
ldr.w r2, [sb, 8]
add r5, pc
strd r1, r4, [sp]
add r0, pc
movs r1, 0x9b
str r5, [sp, 8]
blx loc.imp.ap_log_rerror_
b 0x21b4
ldr r2, [0x000023d4]
add.w r8, sp, 0x34
movs r1, 7
mov r0, r8
add r2, pc
blx loc.imp.apr_snprintf
b 0x21f8
ldr r3, [0x000023d8]
--
vldr d17, [fp, -0x38]
vst1.32 {d16, d17}, [r0]
vld1.32 {d16}, [ip]
vstr d16, [r5, 0x1c8]
ldr r0, [fp, -0x18]
blx loc.imp.ap_create_request_config
mov r1, r5
str.w r0, [r5, 0x104]
mov r0, r7
blx loc.imp.proxy_run_create_req
ldr r3, [r4, 0xc]
ldr.w r1, [0x00002f00]
ldr.w r4, [r7, 0xc0]
ldrh r2, [r3, 0xc]
movs r3, 3
str.w r5, [sl, 4]
add r1, pc
str r3, [r5, 0x20]
mov r5, sb
ldr r0, [r7]
blx loc.imp.apr_psprintf
ldr.w r1, [0x00002f04]
mov r2, r0
--
ldr r3, [sp, 0x5c]
movs r1, 1
mov r0, r7
adds r3, 1
str r3, [sp, 0x5c]
blx loc.imp.ap_send_interim_response
ldr r3, [sp, 0x60]
cbz r3, 0x2e1a
ldr r3, [sp, 0x30]
cmp r3, 0x64
beq.w 0x3abc
ldr r3, [sp, 0x5c]
cmp r3, 0xa
bne.w 0x25fe
ldr r0, [sp, 0x54]
blx loc.imp.apr_brigade_cleanup
ldr r1, [0x00002f9c]
ldr r2, [sp, 0x5c]
ldr r0, [sp, 0x50]
add r1, pc
blx loc.imp.apr_psprintf
b.w 0x3a9e
cmp r1, 0
--
it eq
ldreq r3, [r7, 8]
ldr r2, [r2, 0x10]
it eq
ldreq r0, [r3, 0x34]
ldr.w ip, [r2, 0x3c]
ldr r3, [r7, 0x28]
ldr r2, [sp, 0xa4]
cmp.w ip, 3
smull r2, lr, r2, r3
asr.w r2, r3, 0x1f
rsb r2, r2, lr, asr 6
mls r3, r1, r2, r3
ldr r1, [sp, 0x4c]
add.w r1, r1, 0x14
strd r0, r1, [sp]
beq.w 0x367c
ldr.w r1, [0x00003b80]
ldr r0, [sp, 0x50]
add r1, pc
blx loc.imp.apr_psprintf
mov r2, r0
ldr.w r1, [0x00003b84]
--
cmp r3, 0
beq.w 0x32b4
vmov.i8 d16, 0xff
movs r3, 0
ldr r0, [sp, 0x4c]
sub.w r4, fp, 0x10
vstr d16, [fp, -0x20]
vstr d16, [fp, -0x18]
str.w r3, [r7, 0x94]
bl 0x1e44
str r0, [sp, 0x30]
cmp r0, 0
beq.w 0x32c4
b.w 0x2732
ldr.w r1, [0x00003bb0]
ldr r0, [sp, 0x50]
add r1, pc
str r1, [sp, 8]
ldr.w r1, [0x00003bb4]
add r1, pc
blx loc.imp.apr_psprintf
mov r2, r0
b 0x3454
[*] Function printf used 6 times mod_proxy_http.so
