[*] Binary protection state of chronyc
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of chronyc
movs r3, r7
movs r3, r7
lsls r5, r1, 0xb
movs r3, r7
movs r3, r7
lsls r1, r2, 8
movs r3, r7
movs r3, r7
movs r3, r7
movs r3, r7
movs r3, r7
lsls r5, r0, 3
lsls r5, r1, 0xb
movs r3, r7
movs r3, r7
lsls r5, r0, 3
lsls r7, r6, 1
ldr r1, [sp, 0x1c]
mov r2, r7
movs r0, 1
blx sym.imp.__printf_chk
ldrb.w r3, [r8]
cmp r3, 0
--
lsls r4, r0, 1
lsls r4, r0, 1
lsls r4, r0, 1
lsls r4, r0, 1
lsls r6, r6, 5
lsls r4, r0, 1
lsls r4, r0, 1
lsls r4, r0, 1
lsls r6, r0, 6
lsls r4, r0, 1
lsls r6, r4, 5
ldr r3, [sp, 0x18]
add.w sb, sb, 4
ldr r0, [sb, -0x4]
str.w sb, [r3]
bl 0xba78
ldr.w r1, [0x0000320c]
mov r2, r0
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
adds r6, 1
b 0x292a
--
add r1, pc
vcmpe.f64 d16, 0
vmrs apsr_nzcv, fpscr
ite gt
movgt r0, 1
movle r0, 0
subs.w r2, r8, 0x4f
it ne
movne r2, 1
cmp r0, r2
beq.w 0x3086
ldr.w r2, [0x00003218]
add r2, pc
strd r1, r2, [sp, 8]
movs r0, 1
ldr.w r1, [0x0000321c]
mov r2, r5
vstr d17, [sp]
adds r6, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr.w r3, [sb]
add.w sb, sb, 4
ldr r2, [sp, 0x18]
str.w sb, [r2]
cmp r3, 0
bne.w 0x3056
ldr.w r2, [0x00003220]
add r2, pc
ldr.w r1, str.reload
movs r0, 1
adds r6, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr.w r2, [sb]
add.w r5, sb, 4
ldr r3, [sp, 0x18]
cmp r2, 0x7e
str r5, [r3]
ble.w 0x3048
ldr.w r1, [0x00003228]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
mov sb, r5
adds r6, 1
b 0x292a
ldr.w r3, [sb]
add.w sb, sb, 4
ldr r2, [sp, 0x18]
cmp r3, 0x48
str.w sb, [r2]
beq.w 0x307a
cmp r3, 0x4b
beq.w 0x3068
cmp r3, 0x44
beq.w 0x3062
ldr.w r2, [0x0000322c]
add r2, pc
ldr.w r1, [0x00003230]
movs r0, 1
adds r6, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr.w r3, [sb]
add.w sb, sb, 4
ldr r2, [sp, 0x18]
cmp r3, 2
str.w sb, [r2]
beq.w 0x3080
cmp r3, 4
beq.w 0x306e
cmp r3, 1
beq.w 0x3074
ldr.w r2, [0x00003234]
add r2, pc
ldr.w r1, [0x00003238]
movs r0, 1
adds r6, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr.w r3, [sb]
--
blo.w 0x308c
movw r3, 0x8c9f
cmp r2, r3
bls.w 0x3148
movw r3, 0x45ff
movt r3, 5
cmp r2, r3
bls.w 0x30fc
movw r3, 0x5bff
movt r3, 0x526
cmp r2, r3
bls.w 0x32dc
movw r3, 0xa47b
ldr.w r1, [0x0000323c]
movt r3, 0x4418
movs r0, 1
umull r2, r3, r3, r2
mov sb, r5
add r1, pc
lsrs r2, r3, 0x17
blx sym.imp.__printf_chk
b 0x2c28
ldr r0, [sp, 0x18]
add.w r1, sb, 4
ldr.w r3, [sb]
mov sb, r1
mov r2, r5
adds r6, 1
str r1, [r0]
movs r0, 1
ldr.w r1, [0x00003240]
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr r1, [sp, 0x18]
add.w sb, sb, 4
ldr r3, [sb, -0x4]
mov r2, r5
movs r0, 1
adds r6, 1
str.w sb, [r1]
ldr.w r1, [0x00003244]
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr r1, [sp, 0x18]
add.w r2, sb, 4
mov r8, r2
ldr.w r3, [sb]
str r2, [r1]
ldr r2, [sp, 0x14]
cmp r2, 0
beq.w 0x2f8c
ldr.w r1, [0x00003248]
mov sb, r8
mov r2, r5
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
adds r6, 1
b 0x292a
movs r5, 0
ldr r1, [sp, 0x18]
add.w sb, sb, 4
ldr r3, [sb, -0x4]
mov r2, r5
movs r0, 1
adds r6, 1
str.w sb, [r1]
ldr.w r1, [0x0000324c]
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr r3, [sp, 0x18]
--
subs r5, 1
and r0, r0, 1
adds r0, 0x30
blx sym.imp.putchar
adds r3, r5, 1
bne 0x2dca
mov r2, sb
mov sb, r2
adds r6, 1
b 0x292a
movs r5, 0
ldr r1, [sp, 0x18]
add.w sb, sb, 4
ldr r3, [sb, -0x4]
mov r2, r5
movs r0, 1
adds r6, 1
str.w sb, [r1]
ldr.w r1, [0x00003250]
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
ldr r3, [sp, 0x18]
add.w r5, sb, 4
ldr.w r0, [sb]
str r5, [r3]
blx 0x1d2c
cmp r0, 0
beq.w 0x2c26
ldr.w r2, [0x00003254]
mov r3, r0
mov.w r1, 0x100
mov r0, r7
mov sb, r5
add r2, pc
blx 0x1cd4
ldr.w r1, [0x00003258]
mov r2, r7
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x2c28
ldr r3, [sp, 0x18]
--
vmrs apsr_nzcv, fpscr
bmi.w 0x33ae
vldr d18, [0x000031c4]
vcmpe.f64 d16, d18
vmrs apsr_nzcv, fpscr
bmi.w 0x3394
vldr d18, [0x000031cc]
vcmpe.f64 d16, d18
vmrs apsr_nzcv, fpscr
bmi.w 0x340e
vldr d18, [0x000031d4]
vcmpe.f64 d16, d18
vmrs apsr_nzcv, fpscr
bpl.w 0x33f4
vldr d16, [0x000031dc]
movs r0, 1
ldr r1, [0x0000325c]
vdiv.f64 d16, d17, d16
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b 0x2ad2
ldr r1, [0x00003260]
add.w sb, sb, 4
ldr r3, [sp, 0x18]
movs r0, 1
ldr r2, [sb, -0x4]
adds r6, 1
add r1, pc
str.w sb, [r3]
blx sym.imp.__printf_chk
b 0x292a
ldr r2, [sp, 0x18]
add.w r3, sb, 7
bic r3, r3, 7
vldr d17, [0x000031bc]
add.w sb, r3, 8
ldr r1, [sp, 0x14]
str.w sb, [r2]
ldrd r2, r3, [r3]
vmov d16, r2, r3
vabs.f64 d16, d16
vcmpe.f64 d16, d17
cbz r1, 0x2f9c
vmrs apsr_nzcv, fpscr
bpl.w 0x309a
ldr r1, [0x00003264]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x2ad2
movs r0, 0xa
blx sym.imp.putchar
b 0x2a16
ldr r1, [0x00003268]
add.w r3, sb, 7
bic r3, r3, 7
ldr r2, [sp, 0x18]
add.w sb, r3, 8
vldr d16, [r3]
add r1, pc
movs r3, 3
movs r5, 0
str.w sb, [r2]
mov r2, r5
movs r0, 1
vstr d16, [sp]
adds r6, 1
blx sym.imp.__printf_chk
b 0x292a
ldr r1, [0x0000326c]
mov r2, r5
movs r0, 1
mov sb, r8
add r1, pc
blx sym.imp.__printf_chk
b 0x2d7c
vmrs apsr_nzcv, fpscr
bpl.w 0x30a6
ldr r1, [0x00003270]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x2ad2
vldr d17, [0x0000319c]
--
vmrs apsr_nzcv, fpscr
bmi.w 0x3382
vldr d17, [0x000031c4]
vcmpe.f64 d16, d17
vmrs apsr_nzcv, fpscr
bmi.w 0x3368
vldr d17, [0x000031cc]
vcmpe.f64 d16, d17
vmrs apsr_nzcv, fpscr
bmi.w 0x33da
vldr d17, [0x000031d4]
vcmpe.f64 d16, d17
vmrs apsr_nzcv, fpscr
bpl.w 0x33c0
vldr d17, [0x000031dc]
movs r0, 1
ldr r1, [0x00003274]
vdiv.f64 d16, d16, d17
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b 0x2ad2
ldr r1, [0x00003278]
movs r0, 1
mov sb, r5
add r1, pc
blx sym.imp.__printf_chk
b 0x2c28
ldr r2, [0x0000327c]
--
b 0x2c52
ldr r2, [0x0000328c]
add r2, pc
b 0x2c88
ldr r2, [0x00003290]
add r2, pc
b 0x2c88
ldr r2, [0x00003294]
add r2, pc
b 0x2c52
ldr r2, [0x00003298]
add r2, pc
b 0x2c88
ldr r2, [0x0000329c]
add r2, pc
b 0x2bc4
ldr r1, [0x000032a0]
movs r0, 1
mov sb, r5
add r1, pc
blx sym.imp.__printf_chk
b 0x2c28
ldr r1, [0x000032a4]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x2ad2
ldr r1, [0x000032a8]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x2ad2
cmp r5, 1
beq.w 0x3330
ldr r2, [0x000032ac]
add r2, pc
ldr r1, [0x000032b0]
movs r0, 1
adds r6, 1
add r1, pc
blx sym.imp.__printf_chk
b 0x292a
cmp r5, 1
beq.w 0x32fe
ldr r2, [0x000032b4]
add r2, pc
b 0x30bc
cmp r5, 1
beq.w 0x3336
ldr r2, [0x000032b8]
add r2, pc
b 0x30bc
cmp r5, 1
beq.w 0x32f8
ldr r2, [0x000032bc]
add r2, pc
b 0x30bc
ldr r1, [0x000032c0]
movs r0, 1
mov sb, r5
add r1, pc
blx sym.imp.__printf_chk
b 0x2c28
movw r3, 0xb3c5
ldr r1, [0x000032c4]
movt r3, 0x91a2
movs r0, 1
umull r2, r3, r3, r2
mov sb, r5
add r1, pc
lsrs r2, r3, 0xb
blx sym.imp.__printf_chk
b 0x2c28
vldr d16, [0x000031e4]
movs r0, 1
ldr r1, [0x000032c8]
vmul.f64 d16, d17, d16
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b 0x2ad2
vldr d17, [0x000031e4]
movs r0, 1
ldr r1, [0x000032cc]
vmul.f64 d16, d16, d17
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b 0x2ad2
movw r3, 0x8889
ldr r1, [0x000032d0]
movt r3, 0x8888
movs r0, 1
umull r2, r3, r3, r2
mov sb, r5
add r1, pc
lsrs r2, r3, 5
blx sym.imp.__printf_chk
b 0x2c28
vldr d17, [0x000031ec]
movs r0, 1
ldr r1, [0x000032d4]
vmul.f64 d16, d16, d17
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b 0x2ad2
vldr d16, [0x000031ec]
movs r0, 1
ldr r1, [0x000032d8]
vmul.f64 d16, d17, d16
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b 0x2ad2
nop.w
--
movs r0, r0
push {r1, r4, r7, lr}
movs r0, r0
push {r3, r6, r7, lr}
movs r0, r0
invalid
push {r1, r2, r3, r4, r5, lr}
movs r0, r0
push {r2, r6, r7, lr}
movs r0, r0
push {r3, r4, r6, lr}
movs r0, r0
movw r3, 0x4507
ldr r1, [0x00003478]
movt r3, 0xc22e
movs r0, 1
umull r3, r2, r3, r2
mov sb, r5
add r1, pc
lsrs r2, r2, 0x10
blx sym.imp.__printf_chk
b 0x2c28
ldr r2, [0x0000347c]
add r2, pc
b 0x30bc
ldr r2, [0x00003480]
add r2, pc
b 0x30bc
ldr r1, [0x00003484]
movs r0, 1
vmov r2, r3, d17
add r1, pc
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d16, [0x0000345c]
movs r0, 1
ldr r1, [0x00003488]
vmul.f64 d16, d17, d16
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
ldr r2, [0x0000348c]
add r2, pc
b 0x30bc
ldr r2, [0x00003490]
add r2, pc
b 0x30bc
ldr r1, [0x00003494]
movs r0, 1
vmov r2, r3, d16
add r1, pc
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d17, [0x0000345c]
movs r0, 1
ldr r1, [0x00003498]
vmul.f64 d16, d16, d17
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d17, [0x00003464]
movs r0, 1
ldr r1, [0x0000349c]
vdiv.f64 d16, d16, d17
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
ldr r1, [0x000034a0]
movs r0, 1
vmov r2, r3, d16
add r1, pc
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d16, [0x00003464]
movs r0, 1
ldr r1, [0x000034a4]
vdiv.f64 d16, d17, d16
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
ldr r1, [0x000034a8]
movs r0, 1
vmov r2, r3, d17
add r1, pc
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d17, [0x0000346c]
movs r0, 1
ldr r1, [0x000034ac]
vdiv.f64 d16, d16, d17
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d17, [0x00003474]
movs r0, 1
ldr r1, [0x000034b0]
vdiv.f64 d16, d16, d17
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d16, [0x0000346c]
movs r0, 1
ldr r1, [0x000034b4]
vdiv.f64 d16, d17, d16
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
vldr d16, [0x00003474]
movs r0, 1
ldr r1, [0x000034b8]
vdiv.f64 d16, d17, d16
add r1, pc
vmov r2, r3, d16
blx sym.imp.__printf_chk
b.w 0x2ad2
blx 0x1c98
--
bne 0x3f78
blx 0x1dcc
ldr r0, [r0]
blx sym.imp.strerror
ldr r2, [0x000042cc]
mov.w r1, 0x510
ldr r3, [0x000042d0]
str r0, [sp, 4]
mov r0, r5
add r2, pc
str r2, [sp]
add r3, pc
ldr r2, [0x000042d4]
adds r3, 0xa4
add r2, pc
bl 0x37d8
b 0x3f78
ldr r1, [0x000042d8]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
--
bne.w 0x3df6
ldr r2, [0x000042e4]
movw r1, 0x53e
ldr r3, [0x000042e8]
add r2, pc
str r2, [sp]
add r3, pc
ldr r2, [0x000042ec]
adds r3, 0xa4
add r2, pc
bl 0x37d8
b 0x3df6
ldr r0, [sp, 0x14]
bl 0x927c
cbz r0, 0x410a
movs r0, 1
b 0x3f8c
ldr r1, [0x000042f0]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
--
uxth r3, r3
add r2, pc
str r3, [sp, 0xc]
ldr r3, [0x000042fc]
add r3, pc
adds r3, 0xa4
bl 0x37d8
b 0x3f18
ldr r3, [0x00004300]
movw r2, 0x5b1
ldr r1, [0x00004304]
ldr r0, [0x00004308]
add r3, pc
add r1, pc
adds r3, 0xb4
add r0, pc
blx 0x1adc
ldr r1, [0x0000430c]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004310]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004314]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004318]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x0000431c]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004320]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004324]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004328]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r3, [0x0000432c]
movs r2, 5
movs r7, 1
add r3, pc
str.w r2, [r3, 0x120]
b 0x3d0c
ldr r3, [0x00004330]
movw r2, 0x4e5
ldr r1, [0x00004334]
ldr r0, [0x00004338]
add r3, pc
add r1, pc
adds r3, 0x94
add r0, pc
blx 0x1adc
blx 0x1c98
ldr r1, [0x0000433c]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004340]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004344]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004348]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x0000434c]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004350]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004354]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x4070
ldr r1, [0x00004358]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x4070
ldr r1, [0x0000435c]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004360]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004364]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
b 0x3f8a
ldr r1, [0x00004368]
movs r0, 1
add r1, pc
blx sym.imp.__printf_chk
movs r0, 0xa
blx sym.imp.putchar
--
blt.w 0x6a92
sub.w r3, sl, 0x518
ldr r5, [r3]
adds r5, 7
cmp r5, 0x4f
bhi.w 0x5c40
movs r5, 0xa
add.w r7, sp, 0x790
mov r1, r5
mov r0, r7
ldr.w r4, [0x00006350]
bl 0xd39c
ldr.w r1, [0x00006354]
mov r3, r6
ldr.w r2, [r8]
movs r0, 1
mov r6, r7
add r4, pc
add r1, pc
movs r7, 0
blx sym.imp.__printf_chk
ldrb r2, [r6], 1
adds r7, 1
mov r1, r4
movs r0, 1
blx sym.imp.__printf_chk
cmp r5, r7
bne 0x5b4e
--
add r1, pc
add.w r1, r1, 0x1a0
mov r6, r0
add sl, pc
add sb, pc
add r8, pc
add.w fp, fp, 2
blx 0x1bcc
b 0x5bfe
cmp r0, 0x1c
ite lo
movlo r1, sb
movhs r1, r8
ldr.w r3, [0x00006380]
adds r4, 1
mov r2, r6
movs r0, 1
add r6, r4
adds r7, 1
add r3, pc
blx sym.imp.__printf_chk
cmp r6, fp
bhs.w 0x4e98
--
bl 0x3cb0
cmp r0, 0
beq.w 0x4844
subw r5, r5, 0x454
ldr r0, [r5, 0x1c]
bl 0xc464
ldr r0, [r5, 0x20]
vmov r6, r7, d0
bl 0xc464
ldr r0, [r5, 0x24]
vmov.f64 d8, d0
bl 0xc464
ldr r1, [0x00006404]
mov r3, r7
mov r2, r6
movs r0, 1
vstr d0, [sp, 8]
movs r7, 1
add r1, pc
vstr d8, [sp]
blx sym.imp.__printf_chk
b.w 0x4844
ldr r3, [0x00006408]
[*] Function printf used 72 times chronyc
