[*] Binary protection state of busybox
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcat tear down of busybox
35d04: 97918103 ldrls r8, [r1, r3, lsl #2]
35d08: e2079801 and r9, r7, #65536 ; 0x10000
35d0c: e3520004 cmp r2, #4
35d10: 979ff102 ldrls pc, [pc, r2, lsl #2]
35d14: ea00003c b 35e0c <ftruncate64@plt+0x20b28>
35d18: 00035d34 andeq r5, r3, r4, lsr sp
35d1c: 00035de8 andeq r5, r3, r8, ror #27
35d20: 00035e14 andeq r5, r3, r4, lsl lr
35d24: 00035dfc strdeq r5, [r3], -ip
35d28: 00035e04 andeq r5, r3, r4, lsl #28
35d2c: e3130001 tst r3, #1
35d30: eaffffe7 b 35cd4 <ftruncate64@plt+0x209f0>
35d34: e59f4108 ldr r4, [pc, #264] ; 35e44 <ftruncate64@plt+0x20b60>
35d38: e59f1108 ldr r1, [pc, #264] ; 35e48 <ftruncate64@plt+0x20b64>
35d3c: e28d0038 add r0, sp, #56 ; 0x38
35d40: ebff796b bl 142f4 <strcpy@plt>
35d44: e3590000 cmp r9, #0
35d48: 0a000002 beq 35d58 <ftruncate64@plt+0x20a74>
35d4c: e59f10f8 ldr r1, [pc, #248] ; 35e4c <ftruncate64@plt+0x20b68>
35d50: e28d0038 add r0, sp, #56 ; 0x38
35d54: ebff7b25 bl 149f0 <strcat@plt>
35d58: e3170802 tst r7, #131072 ; 0x20000
35d5c: 0a000002 beq 35d6c <ftruncate64@plt+0x20a88>
35d60: e59f10e8 ldr r1, [pc, #232] ; 35e50 <ftruncate64@plt+0x20b6c>
35d64: e28d0038 add r0, sp, #56 ; 0x38
35d68: ebff7b20 bl 149f0 <strcat@plt>
35d6c: e3170701 tst r7, #262144 ; 0x40000
35d70: 0a000002 beq 35d80 <ftruncate64@plt+0x20a9c>
35d74: e59f10d8 ldr r1, [pc, #216] ; 35e54 <ftruncate64@plt+0x20b70>
35d78: e28d0038 add r0, sp, #56 ; 0x38
35d7c: ebff7b1b bl 149f0 <strcat@plt>
35d80: e59f10d0 ldr r1, [pc, #208] ; 35e58 <ftruncate64@plt+0x20b74>
35d84: e28d0038 add r0, sp, #56 ; 0x38
35d88: ebff7b18 bl 149f0 <strcat@plt>
35d8c: e59d3028 ldr r3, [sp, #40] ; 0x28
35d90: e1a01006 mov r1, r6
--
8f1f8: e1a00006 mov r0, r6
8f1fc: ebfe17d2 bl 1514c <strlen@plt>
8f200: e2807002 add r7, r0, #2
8f204: e5d41011 ldrb r1, [r4, #17]
8f208: e5d40010 ldrb r0, [r4, #16]
8f20c: e1800401 orr r0, r0, r1, lsl #8
8f210: e5d41012 ldrb r1, [r4, #18]
8f214: e1800801 orr r0, r0, r1, lsl #16
8f218: e5d41013 ldrb r1, [r4, #19]
8f21c: e1900c01 orrs r0, r0, r1, lsl #24
8f220: 0a000000 beq 8f228 <ftruncate64@plt+0x79f44>
8f224: ebfe17c8 bl 1514c <strlen@plt>
8f228: e0871000 add r1, r7, r0
8f22c: e1a00006 mov r0, r6
8f230: ebfe25d6 bl 18990 <ftruncate64@plt+0x36ac>
8f234: e3570002 cmp r7, #2
8f238: 03a03000 moveq r3, #0
8f23c: e59f11c0 ldr r1, [pc, #448] ; 8f404 <ftruncate64@plt+0x7a120>
8f240: 05c03000 strbeq r3, [r0]
8f244: e1a06000 mov r6, r0
8f248: ebfe15e8 bl 149f0 <strcat@plt>
8f24c: e5d43011 ldrb r3, [r4, #17]
8f250: e5d41010 ldrb r1, [r4, #16]
8f254: e1811403 orr r1, r1, r3, lsl #8
8f258: e5d43012 ldrb r3, [r4, #18]
8f25c: e1811803 orr r1, r1, r3, lsl #16
8f260: e5d43013 ldrb r3, [r4, #19]
8f264: e1911c03 orrs r1, r1, r3, lsl #24
8f268: 0a000001 beq 8f274 <ftruncate64@plt+0x79f90>
8f26c: e1a00006 mov r0, r6
8f270: ebfe15de bl 149f0 <strcat@plt>
8f274: e3a0b00a mov fp, #10
8f278: eafffdd6 b 8e9d8 <ftruncate64@plt+0x796f4>
--
8f304: e1a00007 mov r0, r7
8f308: ebfe25a0 bl 18990 <ftruncate64@plt+0x36ac>
8f30c: e3580002 cmp r8, #2
8f310: e59f10ec ldr r1, [pc, #236] ; 8f404 <ftruncate64@plt+0x7a120>
8f314: e1a03420 lsr r3, r0, #8
8f318: e5c43011 strb r3, [r4, #17]
8f31c: e1a03820 lsr r3, r0, #16
8f320: e5c43012 strb r3, [r4, #18]
8f324: e1a03c20 lsr r3, r0, #24
8f328: e5c43013 strb r3, [r4, #19]
8f32c: 03a03000 moveq r3, #0
8f330: e5c40010 strb r0, [r4, #16]
8f334: 05c03000 strbeq r3, [r0]
8f338: e5d40011 ldrb r0, [r4, #17]
8f33c: e5d43010 ldrb r3, [r4, #16]
8f340: e1833400 orr r3, r3, r0, lsl #8
8f344: e5d40012 ldrb r0, [r4, #18]
8f348: e1833800 orr r3, r3, r0, lsl #16
8f34c: e5d40013 ldrb r0, [r4, #19]
8f350: e1830c00 orr r0, r3, r0, lsl #24
8f354: ebfe15a5 bl 149f0 <strcat@plt>
8f358: e3560000 cmp r6, #0
8f35c: 0afffd9d beq 8e9d8 <ftruncate64@plt+0x796f4>
8f360: e5d40011 ldrb r0, [r4, #17]
8f364: e5d43010 ldrb r3, [r4, #16]
8f368: e1a01006 mov r1, r6
8f36c: e1833400 orr r3, r3, r0, lsl #8
8f370: e5d40012 ldrb r0, [r4, #18]
8f374: e1833800 orr r3, r3, r0, lsl #16
8f378: e5d40013 ldrb r0, [r4, #19]
8f37c: e1830c00 orr r0, r3, r0, lsl #24
8f380: ebfe159a bl 149f0 <strcat@plt>
8f384: eafffd93 b 8e9d8 <ftruncate64@plt+0x796f4>
8f388: e5d43011 ldrb r3, [r4, #17]
--
90008: 12833001 addne r3, r3, #1
9000c: 15823008 strne r3, [r2, #8]
90010: e8bd8010 pop {r4, pc}
90014: 000ddb78 andeq sp, sp, r8, ror fp
90018: e92d000f push {r0, r1, r2, r3}
9001c: e92d4037 push {r0, r1, r2, r4, r5, lr}
90020: e59f104c ldr r1, [pc, #76] ; 90074 <ftruncate64@plt+0x7ad90>
90024: e28d301c add r3, sp, #28
90028: e58d3004 str r3, [sp, #4]
9002c: e59f3044 ldr r3, [pc, #68] ; 90078 <ftruncate64@plt+0x7ad94>
90030: e5934000 ldr r4, [r3]
90034: e2845fba add r5, r4, #744 ; 0x2e8
90038: e1a00005 mov r0, r5
9003c: ebfe10ac bl 142f4 <strcpy@plt>
90040: e59d2004 ldr r2, [sp, #4]
90044: e59d1018 ldr r1, [sp, #24]
90048: e2840fbb add r0, r4, #748 ; 0x2ec
9004c: ebfe10c9 bl 14378 <vsprintf@plt>
90050: e59f1024 ldr r1, [pc, #36] ; 9007c <ftruncate64@plt+0x7ad98>
90054: e1a00005 mov r0, r5
90058: ebfe1264 bl 149f0 <strcat@plt>
9005c: e3a03008 mov r3, #8
90060: e5843048 str r3, [r4, #72] ; 0x48
--
9df18: ebfddcb2 bl 151e8 <strchrnul@plt>
9df1c: e3a03000 mov r3, #0
9df20: e5c03000 strb r3, [r0]
9df24: e59d0010 ldr r0, [sp, #16]
9df28: e5cd800c strb r8, [sp, #12]
9df2c: ebfddc86 bl 1514c <strlen@plt>
9df30: e5993000 ldr r3, [r9]
9df34: e358000a cmp r8, #10
9df38: 03a02000 moveq r2, #0
9df3c: e08aa000 add sl, sl, r0
9df40: 05832010 streq r2, [r3, #16]
9df44: 0a000003 beq 9df58 <ftruncate64@plt+0x88c74>
9df48: e357005d cmp r7, #93 ; 0x5d
9df4c: 15932010 ldrne r2, [r3, #16]
9df50: 10820000 addne r0, r2, r0
9df54: 15830010 strne r0, [r3, #16]
9df58: e28a1001 add r1, sl, #1
9df5c: e1a00006 mov r0, r6
9df60: ebfdea8a bl 18990 <ftruncate64@plt+0x36ac>
9df64: e59d1010 ldr r1, [sp, #16]
9df68: ebfddaa0 bl 149f0 <strcat@plt>
9df6c: e1a06000 mov r6, r0
9df70: e1a00005 mov r0, r5
[*] Function strcat used 10 times busybox