[*] Binary protection state of httpd
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of httpd
ldr r3, [r0]
ldrh.w r3, [r3, r2, lsl 1]
lsls r3, r3, 0x14
bmi 0x1d4f2
movs r0, 0
ldr r2, [0x0001d51c]
ldr r3, [0x0001d518]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 4]
eors r2, r3
mov.w r3, 0
bne 0x1d50e
add sp, 0xc
pop {r4, r5, pc}
movs r3, 0xa
mov r2, sp
mov r1, r4
mov r0, r5
blx sym.imp.__fprintf_chk
cmp r0, 0
bne 0x1d4d8
--
movs r0, r0
b 0x231c2
invalid
movs r3, r0
push {r1, r2, r3}
ldr.w ip, [0x00023838]
ldr r3, [r0, 4]
ldr r2, [0x0002383c]
add ip, pc
push {lr}
sub sp, 8
ldr r3, [r3, 0x54]
ldr.w r2, [ip, r2]
ldr r1, [sp, 0xc]
ldr r2, [r2]
str r2, [sp, 4]
mov.w r2, 0
cbnz r3, 0x2382c
add r2, sp, 0x10
str r2, [sp]
bl sym.ap_vrprintf
ldr r2, [0x00023840]
ldr r3, [0x0002383c]
--
adds r1, 0x20
str r4, [sp]
bl sym.ap_unixd_set_rlimit
mov r0, r4
add sp, 8
pop {r4, pc}
push {r4, lr}
mov r4, r1
ldr.w lr, [0x00027d14]
sub sp, 8
mov r1, r2
movs r3, 0xa
ldr.w ip, [0x00027d18]
mov r2, sp
add lr, pc
add.w r0, r4, 0x30
ldr.w ip, [lr, ip]
ldr.w ip, [ip]
str.w ip, [sp, 4]
mov.w ip, 0
blx sym.imp.__fprintf_chk
cbnz r0, 0x27d0a
ldr r3, [sp]
--
strb r0, [r1, 0x11]
movs r2, r0
push {r4, r5, r6, lr}
mov r5, r0
ldr r6, [0x00027da4]
sub sp, 0x18
mov r4, r2
movs r3, 0xa
ldr r1, [r0, 0x30]
add r2, sp, 4
ldr r0, [0x00027da8]
add r6, pc
ldr r1, [r1, 0x18]
ldr r0, [r6, r0]
ldr r6, [r1]
mov r1, r4
ldr r0, [r0]
str r0, [sp, 0x14]
mov.w r0, 0
add r0, sp, 8
blx sym.imp.__fprintf_chk
cbnz r0, 0x27d74
ldr r3, [sp, 4]
--
ldr r2, [r6, 0x38]
movs r3, r0
push {r4, r5, r6, lr}
mov r5, r0
ldr r6, [0x00027e28]
sub sp, 0x18
mov r4, r2
movs r3, 0xa
ldr r1, [r0, 0x30]
add r2, sp, 4
ldr r0, [0x00027e2c]
add r6, pc
ldr r1, [r1, 0x18]
ldr r0, [r6, r0]
ldr r6, [r1]
mov r1, r4
ldr r0, [r0]
str r0, [sp, 0x14]
mov.w r0, 0
add r0, sp, 8
blx sym.imp.__fprintf_chk
cbnz r0, 0x27df6
ldr r3, [sp, 4]
--
strb r2, [r6, 0xf]
movs r2, r0
ldr r0, [r6, 0x30]
movs r3, r0
push {r4, r5, r6, lr}
mov r6, r0
ldr r0, [0x00027ea8]
mov r5, r1
sub sp, 0x18
mov r4, r2
ldr r1, [0x00027eac]
movs r3, 0xa
add r0, pc
add r2, sp, 4
ldr r1, [r0, r1]
add r0, sp, 8
ldr r1, [r1]
str r1, [sp, 0x14]
mov.w r1, 0
mov r1, r4
blx sym.imp.__fprintf_chk
cbnz r0, 0x27e76
ldr r3, [sp, 4]
--
mov r8, r3
mov r4, r0
mov sb, r1
ldr r2, [0x00036538]
movs r1, 0x80
ldr r3, [0x0003653c]
ldr r6, [r0, 4]
add r2, pc
ldr r3, [r2, r3]
mov r0, r6
ldr r3, [r3]
str r3, [sp, 0x24]
mov.w r3, 0
blx 0x18240
movs r2, 0x80
movs r1, 0
blx 0x17c40
mov r1, r6
mov r5, r0
adds r0, 0xc
blx sym.imp.apr_pvsprintf
ldr r3, [0x00036540]
movs r1, 0x10
--
mov r1, r0
add r3, pc
adds r0, r3, 4
b.w 0x17f8c
invalid
ldr.w ip, [0x00036e68]
movs r2, 0
ldr r1, [0x00036e6c]
push {r4, lr}
mov r4, r0
add ip, pc
ldr r3, [r4]
sub sp, 8
ldr.w r1, [ip, r1]
mov r0, sp
ldr r1, [r1]
str r1, [sp, 4]
mov.w r1, 0
ldr r1, [r3]
str r2, [sp]
blx sym.imp.apr_pvsprintf
ldr r0, [r4, 0xc]
cbz r0, 0x36e4a
--
bl sym.ap_server_root_relative
mov r1, r0
cmp r0, 0
beq 0x37c84
movw r3, 0xfff
movw r2, 0x400e
add r0, sp, 0x18
str r5, [sp]
blx sym.imp.apr_procattr_error_check_set
mov r4, r0
cmp r0, 0
bne 0x37c58
ldr r3, [0x00037cbc]
add r3, pc
ldr r1, [r3, 0x10]
cmp r1, 0
beq 0x37c52
ldr r6, [0x00037cc0]
add r6, pc
adds r0, r6, 4
blx sym.imp.apr_pvsprintf
mov r4, r0
cbz r0, 0x37c2c
[*] Function printf used 9 times httpd
