[*] Binary protection state of mosquitto_passwd
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mosquitto_passwd
cmp r5, 0x84
movs r0, r0
push.w {r4, r5, r6, r7, r8, sb, sl, fp, lr}
sub sp, 0x34
strd r1, r2, [sp, 0x10]
mov.w r7, 0x400
mov r6, r0
mov r0, r7
ldr r2, [0x00002308]
str r3, [sp, 0x18]
ldr r3, [0x0000230c]
add r2, pc
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 0x2c]
mov.w r3, 0
ldr r3, [0x00002310]
str r7, [sp, 0x28]
add r3, pc
str r3, [sp, 0x1c]
blx sym.imp.__snprintf_chk
str r0, [sp, 0x24]
cmp r0, 0
beq.w 0x22e0
mov r0, r7
blx sym.imp.__snprintf_chk
mov r4, r0
cmp r0, 0
--
ldr.w r8, [0x00002314]
add r3, sp, 0x24
mov.w sb, 0
movs r5, 1
add.w fp, sp, 0x28
str r3, [sp, 0xc]
add r8, pc
b 0x2266
ldr r0, [sp, 0xc]
mov r2, r6
mov r1, fp
bl sym.fgets_extending
cmp r0, 0
beq 0x2270
ldr.w sl, [sp, 0x28]
cmp sl, r7
beq 0x220a
mov r0, r4
blx 0x13a0
mov r0, sl
blx sym.imp.__snprintf_chk
mov r4, r0
cmp r0, 0
--
mov.w r3, 0
bne 0x28f2
mov r1, r4
mov r0, r6
add sp, 0x60
pop.w {r4, r5, r6, lr}
b.w 0x144c
mov r1, sp
blx sym.imp.realloc
cmp r0, 0
blt 0x28ee
ldr r3, [sp, 0x10]
and r3, r3, 0xd000
cmp.w r3, 0x8000
beq 0x2874
ldr r2, [0x00002908]
mov r3, r6
movs r1, 8
movs r0, 0
add r2, pc
bl sym.log__printf
movs r4, 0
b 0x288e
--
mov r0, r8
pop.w {r4, r5, r6, r7, r8, pc}
nop
push.w {r4, r5, r6, r7, r8, lr}
mov r6, r2
ldr r2, [0x00002a9c]
sub sp, 8
mov r7, r1
mov r5, r0
ldr r3, [0x00002aa0]
add r2, pc
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 4]
mov.w r3, 0
blx 0x13ac
blx sym.imp.BIO_new
mov.w r1, 0x100
mov r4, r0
blx sym.imp.tcgetattr
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov r1, r0
--
blx 0x14f0
mov r2, r7
mov r1, r5
mov r4, r0
blx 0x1554
movs r3, 0
movs r1, 0xb
mov r2, r3
mov r0, r4
blx sym.imp.unlink
cmp r0, 1
bne 0x2a74
mov r3, sp
movs r2, 0
movs r1, 0x73
mov r0, r4
blx sym.imp.unlink
ldr r7, [sp]
ldr.w r8, [r7]
add.w r0, r8, 1
blx sym.imp.__snprintf_chk
mov r5, r0
str r0, [r6]
--
blx 0x14e4
nop
movs r4, 0xd0
movs r0, r0
lsls r0, r3, 4
movs r0, r0
movs r4, 0x44
movs r0, r0
push.w {r3, r4, r5, r6, r7, r8, sb, lr}
mov r8, r1
mov sb, r2
mov r7, r0
blx sym.imp.fclose
mov r6, r0
blx 0x13ac
blx sym.imp.BIO_new
cbz r0, 0x2b02
mov.w r1, 0x100
mov r4, r0
blx sym.imp.tcgetattr
blx sym.imp.__printf_chk
blx sym.imp.BIO_new
mov r5, r0
[*] Function printf used 7 times mosquitto_passwd
