[*] Binary protection state of sar
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of sar
; assembly | /* r2dec pseudo code output */
| /* /logs/firmware/patool_extraction/rootfs.img_unblob_extracted/rootfs.img_extract/0-80367616.squashfs_v4_le_extract/usr/bin/sar @ 0x2888 */
| #include <stdint.h>
|
; (fcn) fcn.00002888 () | void fcn_00002888 (int16_t arg1, int16_t arg2) {
| r0 = arg1;
| r1 = arg2;
0x00002888 push {r3, r4, r5, lr} |
0x0000288a mov r5, r0 | r5 = r0;
0x0000288c mov r0, r1 | r0 = r1;
0x0000288e mov r4, r1 | r4 = r1;
0x00002890 blx 0x1860 | fcn_00001860 ();
0x00002894 adds r0, 1 | r0++;
0x00002896 blx 0x17e4 | fcn_000017e4 ();
0x0000289a ldr r3, [pc, 0x24] |
0x0000289c add r3, pc | r3 = 0x5162;
0x0000289e add.w r3, r3, r5, lsl 2 | r3 += (r5 << 2);
0x000028a2 str r0, [r3, 0x50] | *((r3 + 0x50)) = r0;
| if (r0 != 0) {
0x000028a4 cbz r0, 0x28b0 |
0x000028a6 mov r1, r4 | r1 = r4;
0x000028a8 pop.w {r3, r4, r5, lr} |
0x000028ac b.w 0x17a4 | void (*0x17a4)() ();
| }
0x000028b0 ldr r0, [pc, 0x10] |
0x000028b2 add r0, pc | r0 = 0x517a;
0x000028b4 blx 0x1768 | perror (r0);
0x000028b8 movs r0, 4 | r0 = 4;
0x000028ba blx 0x1848 | fcn_00001848 ();
0x000028be nop |
0x000028c0 strb r0, [r4, r2] | *((r4 + r2)) = r0;
0x000028c2 movs r1, r0 | r1 = r0;
0x000028c4 lsls r2, r1, 0xe | r2 = r1 << 0xe;
0x000028c6 movs r1, r0 | r1 = r0;
| }
[*] Function strcpy used 1 times sar