[*] Binary protection state of trattcom
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of trattcom
ble.w 0x3bb6
cmp.w r6, 0x4b0
movw r4, 0x100f
it eq
moveq r4, 9
b 0x3870
ldr r1, [sp, 0xc]
mov r0, r6
bl 0x2d48
cmp r0, 0
blt.w 0x3cc2
ldr r5, [sp, 0xc]
movs r1, 0x64
ldr r3, [r5, 4]
ldr r6, [r3, 0x40]
mov r0, r6
blx 0x1c9c
mov r1, r6
mov r2, r0
ldr r0, [r5, 0x2c]
blx sym.imp.g_strdup_printf
ldr r1, [r5, 0x2c]
mov r3, r0
--
bl 0x49fc
movs r3, 1
mov r1, r7
mov r2, r3
mov r0, r6
bl 0x49fc
ldr r1, [r5, 4]
movs r3, 2
mov r2, r3
mov r0, r6
adds r1, 0x24
bl 0x49fc
mov r0, r6
bl 0x4a98
ldr r3, [r5, 0x2c]
cmp r3, sb
blt.w 0x3d3e
uxtb r2, r0
mov r1, r6
mov r0, r3
blx sym.imp.g_strdup_printf
b 0x3d3e
cmp r6, 0x6e
--
it eq
moveq r4, r8
beq.w 0x3870
cmp r6, 0x4b
movw r4, 0x100f
it eq
moveq r4, 2
b 0x3870
ldr.w r2, [0x00004094]
movs r1, 0x80
movs r0, 0
add r2, pc
blx 0x1d74
mov r0, r4
blx 0x1d20
movw r3, 0x6b6f
add r1, sp, 0x80
movs r2, 2
ldr r0, [r5, 0x2c]
strh.w r3, [sp, 0x80]
blx sym.imp.g_strdup_printf
ldr.w r2, [0x00004098]
mov r3, r0
--
bl 0x49c8
mov r0, sl
bl 0x4a98
mov fp, r0
ldr r0, [r4, 4]
cmp r0, 0
beq.w 0x45b4
ldr r2, [0x000040e8]
movs r1, 0x40
str r0, [sp]
movs r0, 0
ldr r3, [r4, 0xc]
add r2, pc
blx 0x1d74
ldr r3, [sp, 0xc]
ldr r0, [r3, 0x2c]
cmp r0, 0
blt 0x3f58
uxtb.w r2, fp
mov r1, sl
blx sym.imp.g_strdup_printf
mov r0, sl
blx sym.imp.g_free
--
mov r2, r3
ldr r5, [sp, 0xc]
mov r0, r6
strb r3, [r6, 3]
ldr r3, [0x000040f4]
ldr r1, [r5, 4]
add r3, pc
strb.w r2, [r3, 0x144]
adds r1, 0x1c
movs r2, 1
movs r3, 0
bl 0x49fc
mov r0, r6
bl 0x4a98
mov r2, r0
ldr r0, [r5, 0x2c]
cmp r0, 0
blt.w 0x3d3e
uxtb r2, r2
mov r1, r6
blx sym.imp.g_strdup_printf
b 0x3d3e
ldrh r4, [r5, r5]
--
mls r3, ip, r3, r1
mov r1, r6
cmp r3, 0
it eq
moveq r3, 1
strb.w r3, [r2, 0x144]
mov r2, r6
strb r3, [r0, 3]
movs r3, 0x1e
strb r3, [r0, 4]
bl 0x49c8
mov r0, r7
bl 0x4a98
ldr r3, [sp, 0xc]
mov r2, r0
ldr r0, [r3, 0x2c]
cmp r0, 0
blt 0x452e
uxtb r2, r2
mov r1, r7
blx sym.imp.g_strdup_printf
mov r0, r7
blx sym.imp.g_free
[*] Function printf used 6 times trattcom
