[*] Binary protection state of filefrag
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of filefrag
movs r0, r0
lsls r4, r7, 1
movs r0, r0
cmp r0, 0x16
movs r0, r0
cmp r0, 0x1a
movs r0, r0
b 0x17a0
nop
ldr.w ip, [0x00001840]
movs r1, 1
push {r3, lr}
mov r3, r0
ldr.w lr, [0x00001844]
add ip, pc
ldr r2, [0x00001848]
mov r0, ip
ldr.w r4, [ip, lr]
add r2, pc
ldr r0, [r4]
blx sym.imp.__fprintf_chk
movs r0, 1
blx sym.imp.exit
--
add r2, pc
ldr r1, [0x0000188c]
add r0, pc
ldr r4, [r2]
str r0, [sp, 0xc]
add r1, pc
ldr r2, [r2, 4]
movs r0, 1
adds r5, r4, r0
str r1, [sp, 4]
lsls r4, r0
ldr r3, [0x00001890]
ldr r1, [0x00001894]
lsls r2, r0
adds r4, 3
add r3, pc
str r5, [sp, 8]
add r1, pc
adds r2, 3
str r4, [sp]
blx sym.imp.__printf_chk
add sp, 0x14
pop {r4, r5, pc}
--
adds r1, r6, r0
add r2, pc
ldr r0, [r2]
str r0, [r6, r3]
ldrh r3, [r2, 4]
strh r3, [r1, 4]
cbz r5, 0x1a8c
cbz r4, 0x1a8c
ldr.w r8, [0x00001af8]
movs r5, 1
add r7, sp, 8
add r8, pc
tst r5, r4
beq 0x1a76
movs r1, 1
mov r3, r8
movs r2, 0xc
mov r0, r7
str r5, [sp]
bic.w r4, r4, r5
blx sym.imp.__sprintf_chk
mov r1, r7
mov r0, r6
--
beq.w 0x1d00
ldr r3, [0x00001d18]
add r3, pc
ldr r1, [0x00001d1c]
ldr r0, [sp, 0x5c]
ldr r2, [sp, 0x58]
add r1, pc
ldr r1, [r1]
lsrs r2, r5
str r1, [sp]
lsl.w r1, r0, fp
orrs r2, r1
lsr.w r1, r0, sl
orrs r2, r1
movs r1, 1
str r2, [sp, 8]
lsr.w r2, r0, r5
mov r0, sb
str r2, [sp, 0xc]
mov.w r2, 0x100
blx sym.imp.__sprintf_chk
b 0x1c24
ldr r3, [0x00001d20]
mov.w r2, 0x100
movs r1, 1
mov r0, sb
add r3, pc
ldr r3, [r3]
str r3, [sp]
ldr r3, [0x00001d24]
add r3, pc
str r3, [sp, 4]
ldr r3, [0x00001d28]
add r3, pc
blx sym.imp.__sprintf_chk
ldr r0, [r4, 0x28]
movs r2, 1
--
mov.w r0, 1
ldr r1, [sp, 0x68]
str r3, [sp, 0x24]
ldr r3, [sp, 0x54]
strd r8, r1, [sp]
str.w sb, [sp, 0x40]
adc.w r3, r3, r1
ldr r1, [0x00001d30]
str r7, [sp, 0x20]
str r6, [sp, 0x10]
add r1, pc
str r3, [sp, 0x14]
ldrd r1, r3, [r1]
ldr r2, [sp, 0x60]
str r1, [sp, 0x28]
str r1, [sp, 0x18]
ldr r1, [0x00001d34]
str r3, [sp, 8]
add r1, pc
ldr r1, [r1]
blx sym.imp.__printf_chk
ldr r2, [0x00001d38]
ldr r3, [0x00001d10]
--
blx sym.imp.__errno_location
ldr r0, [r0]
ldr.w r8, [sp, 0x34]
cmp r0, 0x35
it ne
rsbne r0, r0, 0
bne 0x1f1a
ldr r5, [0x00001ff0]
add r5, pc
ldr r3, [r5, 0x10]
cbz r3, 0x1fac
mvn r0, 0x34
b 0x1f1a
ldr r1, [0x00001ff4]
ldr r2, [0x00001ff8]
ldr r3, [r4, 8]
ldr.w r1, [r8, r1]
add r2, pc
ldr r0, [r1]
movs r1, 1
blx sym.imp.__fprintf_chk
movs r3, 1
str r3, [r5, 0x10]
[*] Function printf used 7 times filefrag
