[*] Binary protection state of ubiblock
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of ubiblock
11078: e3a03016 mov r3, #22
1107c: e5803000 str r3, [r0]
11080: e3e00000 mvn r0, #0
11084: e28dd01c add sp, sp, #28
11088: e8bd8030 pop {r4, r5, pc}
1108c: 0002409c muleq r2, ip, r0
11090: 000135a7 andeq r3, r1, r7, lsr #11
11094: 00013673 andeq r3, r1, r3, ror r6
11098: e92d48f0 push {r4, r5, r6, r7, fp, lr}
1109c: e28db014 add fp, sp, #20
110a0: e1a06001 mov r6, r1
110a4: e1a04002 mov r4, r2
110a8: e1a05000 mov r5, r0
110ac: ebfffe10 bl 108f4 <strlen@plt>
110b0: e1a02006 mov r2, r6
110b4: e1a01005 mov r1, r5
110b8: e2800039 add r0, r0, #57 ; 0x39
110bc: e3c00007 bic r0, r0, #7
110c0: e04dd000 sub sp, sp, r0
110c4: e1a0000d mov r0, sp
110c8: ebfffe00 bl 108d0 <sprintf@plt>
110cc: e1a01004 mov r1, r4
110d0: e1a0000d mov r0, sp
110d4: ebffffd2 bl 11024 <free@plt+0x6f4>
110d8: e24bd014 sub sp, fp, #20
110dc: e8bd88f0 pop {r4, r5, r6, r7, fp, pc}
110e0: e92d48f0 push {r4, r5, r6, r7, fp, lr}
110e4: e28db014 add fp, sp, #20
110e8: e1a06001 mov r6, r1
110ec: e1a07002 mov r7, r2
110f0: e1a04003 mov r4, r3
110f4: e1a05000 mov r5, r0
110f8: ebfffdfd bl 108f4 <strlen@plt>
110fc: e1a03007 mov r3, r7
11100: e1a02006 mov r2, r6
11104: e1a01005 mov r1, r5
11108: e280006b add r0, r0, #107 ; 0x6b
1110c: e3c00007 bic r0, r0, #7
11110: e04dd000 sub sp, sp, r0
11114: e1a0000d mov r0, sp
11118: ebfffdec bl 108d0 <sprintf@plt>
1111c: e1a01004 mov r1, r4
11120: e1a0000d mov r0, sp
--
1156c: eaffffe8 b 11514 <free@plt+0xbe4>
11570: 00013781 andeq r3, r1, r1, lsl #15
11574: 000135a7 andeq r3, r1, r7, lsr #11
11578: 00013788 andeq r3, r1, r8, lsl #15
1157c: 0002409c muleq r2, ip, r0
11580: 000137bb ; <UNDEFINED> instruction: 0x000137bb
11584: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11588: e5904000 ldr r4, [r0]
1158c: e28db014 add fp, sp, #20
11590: e1a00004 mov r0, r4
11594: e1a06003 mov r6, r3
11598: e1a07001 mov r7, r1
1159c: e1a05002 mov r5, r2
115a0: ebfffcd3 bl 108f4 <strlen@plt>
115a4: e1a02007 mov r2, r7
115a8: e1a01004 mov r1, r4
115ac: e2800039 add r0, r0, #57 ; 0x39
115b0: e3c00007 bic r0, r0, #7
115b4: e04dd000 sub sp, sp, r0
115b8: e1a0000d mov r0, sp
115bc: ebfffcc3 bl 108d0 <sprintf@plt>
115c0: e1a02006 mov r2, r6
115c4: e1a01005 mov r1, r5
--
120c4: e59f20c0 ldr r2, [pc, #192] ; 1218c <free@plt+0x185c>
120c8: e59f10d0 ldr r1, [pc, #208] ; 121a0 <free@plt+0x1870>
120cc: e5900000 ldr r0, [r0]
120d0: ebfff9da bl 10840 <fprintf@plt>
120d4: ebfffa00 bl 108dc <__errno_location@plt>
120d8: e3a03013 mov r3, #19
120dc: eaffffcd b 12018 <free@plt+0x16e8>
120e0: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
120e4: e1530009 cmp r3, r9
120e8: 1affffed bne 120a4 <free@plt+0x1774>
120ec: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
120f0: e1540003 cmp r4, r3
120f4: caffffee bgt 120b4 <free@plt+0x1784>
120f8: e3570000 cmp r7, #0
120fc: 03a00001 moveq r0, #1
12100: 0affffb6 beq 11fe0 <free@plt+0x16b0>
12104: e2473001 sub r3, r7, #1
12108: e1a02004 mov r2, r4
1210c: e5961040 ldr r1, [r6, #64] ; 0x40
12110: e1a00008 mov r0, r8
12114: ebfff9ed bl 108d0 <sprintf@plt>
12118: e3a01000 mov r1, #0
1211c: e1a00008 mov r0, r8
--
12544: ebfff899 bl 107b0 <ioctl@plt>
12548: e2900000 adds r0, r0, #0
1254c: 13a00001 movne r0, #1
12550: e2600000 rsb r0, r0, #0
12554: e28dd014 add sp, sp, #20
12558: e49df004 pop {pc} ; (ldr pc, [sp], #4)
1255c: 40044f02 andmi r4, r4, r2, lsl #30
12560: e92d4830 push {r4, r5, fp, lr}
12564: e28db00c add fp, sp, #12
12568: e24dd068 sub sp, sp, #104 ; 0x68
1256c: e5904010 ldr r4, [r0, #16]
12570: e1a05001 mov r5, r1
12574: e1a00004 mov r0, r4
12578: ebfff8dd bl 108f4 <strlen@plt>
1257c: e1a02005 mov r2, r5
12580: e1a01004 mov r1, r4
12584: e2800039 add r0, r0, #57 ; 0x39
12588: e3c00007 bic r0, r0, #7
1258c: e04dd000 sub sp, sp, r0
12590: e1a0000d mov r0, sp
12594: ebfff8cd bl 108d0 <sprintf@plt>
12598: e24b1074 sub r1, fp, #116 ; 0x74
1259c: e1a0000d mov r0, sp
--
1280c: ebfffa21 bl 11098 <free@plt+0x768>
12810: e3500000 cmp r0, #0
12814: 1affff77 bne 125f8 <free@plt+0x1cc8>
12818: e2842048 add r2, r4, #72 ; 0x48
1281c: e1a01006 mov r1, r6
12820: e5950030 ldr r0, [r5, #48] ; 0x30
12824: ebfffa1b bl 11098 <free@plt+0x768>
12828: e3500000 cmp r0, #0
1282c: 1affff71 bne 125f8 <free@plt+0x1cc8>
12830: e595802c ldr r8, [r5, #44] ; 0x2c
12834: e1a0900d mov r9, sp
12838: e1a00008 mov r0, r8
1283c: ebfff82c bl 108f4 <strlen@plt>
12840: e1a02006 mov r2, r6
12844: e1a01008 mov r1, r8
12848: e2800039 add r0, r0, #57 ; 0x39
1284c: e3c00007 bic r0, r0, #7
12850: e04dd000 sub sp, sp, r0
12854: e28d7008 add r7, sp, #8
12858: e1a00007 mov r0, r7
1285c: ebfff81b bl 108d0 <sprintf@plt>
12860: e2841040 add r1, r4, #64 ; 0x40
12864: e1a00007 mov r0, r7
--
12aec: e1a05001 mov r5, r1
12af0: e1a06002 mov r6, r2
12af4: e3a01000 mov r1, #0
12af8: e3a020b0 mov r2, #176 ; 0xb0
12afc: e1a07000 mov r7, r0
12b00: e1a00009 mov r0, r9
12b04: e1a04003 mov r4, r3
12b08: ebfff764 bl 108a0 <emset@plt>
12b0c: e597a048 ldr sl, [r7, #72] ; 0x48
12b10: e8840060 stm r4, {r5, r6}
12b14: e1a0000a mov r0, sl
12b18: ebfff775 bl 108f4 <strlen@plt>
12b1c: e1a0800d mov r8, sp
12b20: e1a03006 mov r3, r6
12b24: e1a02005 mov r2, r5
12b28: e1a0100a mov r1, sl
12b2c: e280006b add r0, r0, #107 ; 0x6b
12b30: e3c00007 bic r0, r0, #7
12b34: e04dd000 sub sp, sp, r0
12b38: e1a0000d mov r0, sp
12b3c: ebfff763 bl 108d0 <sprintf@plt>
12b40: e1a0000d mov r0, sp
12b44: e284200c add r2, r4, #12
12b48: e1a01009 mov r1, r9
12b4c: ebfffa56 bl 114ac <free@plt+0xb7c>
12b50: e1a0d008 mov sp, r8
12b54: e3500000 cmp r0, #0
12b58: 0a000003 beq 12b6c <free@plt+0x223c>
12b5c: e3e08000 mvn r8, #0
12b60: e1a00008 mov r0, r8
12b64: e24bd020 sub sp, fp, #32
12b68: e8bd8ff0 pop {r4, r5, r6, r7, r8, r9, sl, fp, pc}
12b6c: e5979044 ldr r9, [r7, #68] ; 0x44
12b70: e1a00009 mov r0, r9
12b74: ebfff75e bl 108f4 <strlen@plt>
12b78: e1a03006 mov r3, r6
12b7c: e1a02005 mov r2, r5
12b80: e1a01009 mov r1, r9
12b84: e280006b add r0, r0, #107 ; 0x6b
12b88: e3c00007 bic r0, r0, #7
12b8c: e04dd000 sub sp, sp, r0
12b90: e1a0000d mov r0, sp
12b94: ebfff74d bl 108d0 <sprintf@plt>
12b98: e1a0000d mov r0, sp
12b9c: e3a02032 mov r2, #50 ; 0x32
--
12be8: e3a03003 mov r3, #3
12bec: e5843010 str r3, [r4, #16]
12bf0: e1a02006 mov r2, r6
12bf4: e2843014 add r3, r4, #20
12bf8: e1a01005 mov r1, r5
12bfc: e597004c ldr r0, [r7, #76] ; 0x4c
12c00: ebfff936 bl 110e0 <free@plt+0x7b0>
12c04: e3500000 cmp r0, #0
12c08: 1affffd3 bne 12b5c <free@plt+0x222c>
12c0c: e5978050 ldr r8, [r7, #80] ; 0x50
12c10: e1a0900d mov r9, sp
12c14: e1a00008 mov r0, r8
12c18: ebfff735 bl 108f4 <strlen@plt>
12c1c: e1a03006 mov r3, r6
12c20: e1a02005 mov r2, r5
12c24: e1a01008 mov r1, r8
12c28: e280006b add r0, r0, #107 ; 0x6b
12c2c: e3c00007 bic r0, r0, #7
12c30: e04dd000 sub sp, sp, r0
12c34: e1a0000d mov r0, sp
12c38: ebfff724 bl 108d0 <sprintf@plt>
12c3c: e1a0000d mov r0, sp
12c40: e2841018 add r1, r4, #24
--
12c90: e1a02006 mov r2, r6
12c94: e1a01005 mov r1, r5
12c98: e597005c ldr r0, [r7, #92] ; 0x5c
12c9c: ebfff90f bl 110e0 <free@plt+0x7b0>
12ca0: e2508000 subs r8, r0, #0
12ca4: 1affffac bne 12b5c <free@plt+0x222c>
12ca8: e5941028 ldr r1, [r4, #40] ; 0x28
12cac: e594002c ldr r0, [r4, #44] ; 0x2c
12cb0: e5977060 ldr r7, [r7, #96] ; 0x60
12cb4: e0c32190 smull r2, r3, r0, r1
12cb8: e1a00007 mov r0, r7
12cbc: e1c422f0 strd r2, [r4, #32]
12cc0: ebfff70b bl 108f4 <strlen@plt>
12cc4: e1a03006 mov r3, r6
12cc8: e1a02005 mov r2, r5
12ccc: e1a01007 mov r1, r7
12cd0: e280006b add r0, r0, #107 ; 0x6b
12cd4: e3c00007 bic r0, r0, #7
12cd8: e04dd000 sub sp, sp, r0
12cdc: e1a0000d mov r0, sp
12ce0: ebfff6fa bl 108d0 <sprintf@plt>
12ce4: e1a0000d mov r0, sp
12ce8: e3a02081 mov r2, #129 ; 0x81
--
12f04: 0a000004 beq 12f1c <free@plt+0x25ec>
12f08: e5963000 ldr r3, [r6]
12f0c: e3530002 cmp r3, #2
12f10: 1affffca bne 12e40 <free@plt+0x2510>
12f14: e2844001 add r4, r4, #1
12f18: eafffff0 b 12ee0 <free@plt+0x25b0>
12f1c: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
12f20: e15a0003 cmp sl, r3
12f24: 1afffffa bne 12f14 <free@plt+0x25e4>
12f28: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
12f2c: e1540003 cmp r4, r3
12f30: c3a03013 movgt r3, #19
12f34: c5863000 strgt r3, [r6]
12f38: caffffc0 bgt 12e40 <free@plt+0x2510>
12f3c: e51b30bc ldr r3, [fp, #-188] ; 0xffffff44
12f40: e1a02004 mov r2, r4
12f44: e2438001 sub r8, r3, #1
12f48: e1a03008 mov r3, r8
12f4c: e5951040 ldr r1, [r5, #64] ; 0x40
12f50: e1a00007 mov r0, r7
12f54: ebfff65d bl 108d0 <sprintf@plt>
12f58: e3a01000 mov r1, #0
12f5c: e1a00007 mov r0, r7
[*] Function sprintf used 11 times ubiblock
