[*] Binary protection state of ubidetach
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of ubidetach
111f8: e3a03016 mov r3, #22
111fc: e5803000 str r3, [r0]
11200: e3e00000 mvn r0, #0
11204: e28dd01c add sp, sp, #28
11208: e8bd8030 pop {r4, r5, pc}
1120c: 000250b8 strheq r5, [r2], -r8
11210: 00013a0f andeq r3, r1, pc, lsl #20
11214: 00013adb ldrdeq r3, [r1], -fp
11218: e92d48f0 push {r4, r5, r6, r7, fp, lr}
1121c: e28db014 add fp, sp, #20
11220: e1a06001 mov r6, r1
11224: e1a04002 mov r4, r2
11228: e1a05000 mov r5, r0
1122c: ebfffddb bl 109a0 <strlen@plt>
11230: e1a02006 mov r2, r6
11234: e1a01005 mov r1, r5
11238: e2800039 add r0, r0, #57 ; 0x39
1123c: e3c00007 bic r0, r0, #7
11240: e04dd000 sub sp, sp, r0
11244: e1a0000d mov r0, sp
11248: ebfffdcb bl 1097c <sprintf@plt>
1124c: e1a01004 mov r1, r4
11250: e1a0000d mov r0, sp
11254: ebffffd2 bl 111a4 <free@plt+0x7c8>
11258: e24bd014 sub sp, fp, #20
1125c: e8bd88f0 pop {r4, r5, r6, r7, fp, pc}
11260: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11264: e28db014 add fp, sp, #20
11268: e1a06001 mov r6, r1
1126c: e1a07002 mov r7, r2
11270: e1a04003 mov r4, r3
11274: e1a05000 mov r5, r0
11278: ebfffdc8 bl 109a0 <strlen@plt>
1127c: e1a03007 mov r3, r7
11280: e1a02006 mov r2, r6
11284: e1a01005 mov r1, r5
11288: e280006b add r0, r0, #107 ; 0x6b
1128c: e3c00007 bic r0, r0, #7
11290: e04dd000 sub sp, sp, r0
11294: e1a0000d mov r0, sp
11298: ebfffdb7 bl 1097c <sprintf@plt>
1129c: e1a01004 mov r1, r4
112a0: e1a0000d mov r0, sp
--
116ec: eaffffe8 b 11694 <free@plt+0xcb8>
116f0: 00013be9 andeq r3, r1, r9, ror #23
116f4: 00013a0f andeq r3, r1, pc, lsl #20
116f8: 00013bf0 strdeq r3, [r1], -r0
116fc: 000250b8 strheq r5, [r2], -r8
11700: 00013c23 andeq r3, r1, r3, lsr #24
11704: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11708: e5904000 ldr r4, [r0]
1170c: e28db014 add fp, sp, #20
11710: e1a00004 mov r0, r4
11714: e1a06003 mov r6, r3
11718: e1a07001 mov r7, r1
1171c: e1a05002 mov r5, r2
11720: ebfffc9e bl 109a0 <strlen@plt>
11724: e1a02007 mov r2, r7
11728: e1a01004 mov r1, r4
1172c: e2800039 add r0, r0, #57 ; 0x39
11730: e3c00007 bic r0, r0, #7
11734: e04dd000 sub sp, sp, r0
11738: e1a0000d mov r0, sp
1173c: ebfffc8e bl 1097c <sprintf@plt>
11740: e1a02006 mov r2, r6
11744: e1a01005 mov r1, r5
--
12244: e59f20c0 ldr r2, [pc, #192] ; 1230c <free@plt+0x1930>
12248: e59f10d0 ldr r1, [pc, #208] ; 12320 <free@plt+0x1944>
1224c: e5900000 ldr r0, [r0]
12250: ebfff9a5 bl 108ec <fprintf@plt>
12254: ebfff9cb bl 10988 <__errno_location@plt>
12258: e3a03013 mov r3, #19
1225c: eaffffcd b 12198 <free@plt+0x17bc>
12260: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
12264: e1530009 cmp r3, r9
12268: 1affffed bne 12224 <free@plt+0x1848>
1226c: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
12270: e1540003 cmp r4, r3
12274: caffffee bgt 12234 <free@plt+0x1858>
12278: e3570000 cmp r7, #0
1227c: 03a00001 moveq r0, #1
12280: 0affffb6 beq 12160 <free@plt+0x1784>
12284: e2473001 sub r3, r7, #1
12288: e1a02004 mov r2, r4
1228c: e5961040 ldr r1, [r6, #64] ; 0x40
12290: e1a00008 mov r0, r8
12294: ebfff9b8 bl 1097c <sprintf@plt>
12298: e3a01000 mov r1, #0
1229c: e1a00008 mov r0, r8
--
126c4: ebfff861 bl 10850 <ioctl@plt>
126c8: e2900000 adds r0, r0, #0
126cc: 13a00001 movne r0, #1
126d0: e2600000 rsb r0, r0, #0
126d4: e28dd014 add sp, sp, #20
126d8: e49df004 pop {pc} ; (ldr pc, [sp], #4)
126dc: 40044f02 andmi r4, r4, r2, lsl #30
126e0: e92d4830 push {r4, r5, fp, lr}
126e4: e28db00c add fp, sp, #12
126e8: e24dd068 sub sp, sp, #104 ; 0x68
126ec: e5904010 ldr r4, [r0, #16]
126f0: e1a05001 mov r5, r1
126f4: e1a00004 mov r0, r4
126f8: ebfff8a8 bl 109a0 <strlen@plt>
126fc: e1a02005 mov r2, r5
12700: e1a01004 mov r1, r4
12704: e2800039 add r0, r0, #57 ; 0x39
12708: e3c00007 bic r0, r0, #7
1270c: e04dd000 sub sp, sp, r0
12710: e1a0000d mov r0, sp
12714: ebfff898 bl 1097c <sprintf@plt>
12718: e24b1074 sub r1, fp, #116 ; 0x74
1271c: e1a0000d mov r0, sp
--
1298c: ebfffa21 bl 11218 <free@plt+0x83c>
12990: e3500000 cmp r0, #0
12994: 1affff77 bne 12778 <free@plt+0x1d9c>
12998: e2842048 add r2, r4, #72 ; 0x48
1299c: e1a01006 mov r1, r6
129a0: e5950030 ldr r0, [r5, #48] ; 0x30
129a4: ebfffa1b bl 11218 <free@plt+0x83c>
129a8: e3500000 cmp r0, #0
129ac: 1affff71 bne 12778 <free@plt+0x1d9c>
129b0: e595802c ldr r8, [r5, #44] ; 0x2c
129b4: e1a0900d mov r9, sp
129b8: e1a00008 mov r0, r8
129bc: ebfff7f7 bl 109a0 <strlen@plt>
129c0: e1a02006 mov r2, r6
129c4: e1a01008 mov r1, r8
129c8: e2800039 add r0, r0, #57 ; 0x39
129cc: e3c00007 bic r0, r0, #7
129d0: e04dd000 sub sp, sp, r0
129d4: e28d7008 add r7, sp, #8
129d8: e1a00007 mov r0, r7
129dc: ebfff7e6 bl 1097c <sprintf@plt>
129e0: e2841040 add r1, r4, #64 ; 0x40
129e4: e1a00007 mov r0, r7
--
12c6c: e1a05001 mov r5, r1
12c70: e1a06002 mov r6, r2
12c74: e3a01000 mov r1, #0
12c78: e3a020b0 mov r2, #176 ; 0xb0
12c7c: e1a07000 mov r7, r0
12c80: e1a00009 mov r0, r9
12c84: e1a04003 mov r4, r3
12c88: ebfff72f bl 1094c <emset@plt>
12c8c: e597a048 ldr sl, [r7, #72] ; 0x48
12c90: e8840060 stm r4, {r5, r6}
12c94: e1a0000a mov r0, sl
12c98: ebfff740 bl 109a0 <strlen@plt>
12c9c: e1a0800d mov r8, sp
12ca0: e1a03006 mov r3, r6
12ca4: e1a02005 mov r2, r5
12ca8: e1a0100a mov r1, sl
12cac: e280006b add r0, r0, #107 ; 0x6b
12cb0: e3c00007 bic r0, r0, #7
12cb4: e04dd000 sub sp, sp, r0
12cb8: e1a0000d mov r0, sp
12cbc: ebfff72e bl 1097c <sprintf@plt>
12cc0: e1a0000d mov r0, sp
12cc4: e284200c add r2, r4, #12
12cc8: e1a01009 mov r1, r9
12ccc: ebfffa56 bl 1162c <free@plt+0xc50>
12cd0: e1a0d008 mov sp, r8
12cd4: e3500000 cmp r0, #0
12cd8: 0a000003 beq 12cec <free@plt+0x2310>
12cdc: e3e08000 mvn r8, #0
12ce0: e1a00008 mov r0, r8
12ce4: e24bd020 sub sp, fp, #32
12ce8: e8bd8ff0 pop {r4, r5, r6, r7, r8, r9, sl, fp, pc}
12cec: e5979044 ldr r9, [r7, #68] ; 0x44
12cf0: e1a00009 mov r0, r9
12cf4: ebfff729 bl 109a0 <strlen@plt>
12cf8: e1a03006 mov r3, r6
12cfc: e1a02005 mov r2, r5
12d00: e1a01009 mov r1, r9
12d04: e280006b add r0, r0, #107 ; 0x6b
12d08: e3c00007 bic r0, r0, #7
12d0c: e04dd000 sub sp, sp, r0
12d10: e1a0000d mov r0, sp
12d14: ebfff718 bl 1097c <sprintf@plt>
12d18: e1a0000d mov r0, sp
12d1c: e3a02032 mov r2, #50 ; 0x32
--
12d68: e3a03003 mov r3, #3
12d6c: e5843010 str r3, [r4, #16]
12d70: e1a02006 mov r2, r6
12d74: e2843014 add r3, r4, #20
12d78: e1a01005 mov r1, r5
12d7c: e597004c ldr r0, [r7, #76] ; 0x4c
12d80: ebfff936 bl 11260 <free@plt+0x884>
12d84: e3500000 cmp r0, #0
12d88: 1affffd3 bne 12cdc <free@plt+0x2300>
12d8c: e5978050 ldr r8, [r7, #80] ; 0x50
12d90: e1a0900d mov r9, sp
12d94: e1a00008 mov r0, r8
12d98: ebfff700 bl 109a0 <strlen@plt>
12d9c: e1a03006 mov r3, r6
12da0: e1a02005 mov r2, r5
12da4: e1a01008 mov r1, r8
12da8: e280006b add r0, r0, #107 ; 0x6b
12dac: e3c00007 bic r0, r0, #7
12db0: e04dd000 sub sp, sp, r0
12db4: e1a0000d mov r0, sp
12db8: ebfff6ef bl 1097c <sprintf@plt>
12dbc: e1a0000d mov r0, sp
12dc0: e2841018 add r1, r4, #24
--
12e10: e1a02006 mov r2, r6
12e14: e1a01005 mov r1, r5
12e18: e597005c ldr r0, [r7, #92] ; 0x5c
12e1c: ebfff90f bl 11260 <free@plt+0x884>
12e20: e2508000 subs r8, r0, #0
12e24: 1affffac bne 12cdc <free@plt+0x2300>
12e28: e5941028 ldr r1, [r4, #40] ; 0x28
12e2c: e594002c ldr r0, [r4, #44] ; 0x2c
12e30: e5977060 ldr r7, [r7, #96] ; 0x60
12e34: e0c32190 smull r2, r3, r0, r1
12e38: e1a00007 mov r0, r7
12e3c: e1c422f0 strd r2, [r4, #32]
12e40: ebfff6d6 bl 109a0 <strlen@plt>
12e44: e1a03006 mov r3, r6
12e48: e1a02005 mov r2, r5
12e4c: e1a01007 mov r1, r7
12e50: e280006b add r0, r0, #107 ; 0x6b
12e54: e3c00007 bic r0, r0, #7
12e58: e04dd000 sub sp, sp, r0
12e5c: e1a0000d mov r0, sp
12e60: ebfff6c5 bl 1097c <sprintf@plt>
12e64: e1a0000d mov r0, sp
12e68: e3a02081 mov r2, #129 ; 0x81
--
13084: 0a000004 beq 1309c <free@plt+0x26c0>
13088: e5963000 ldr r3, [r6]
1308c: e3530002 cmp r3, #2
13090: 1affffca bne 12fc0 <free@plt+0x25e4>
13094: e2844001 add r4, r4, #1
13098: eafffff0 b 13060 <free@plt+0x2684>
1309c: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
130a0: e15a0003 cmp sl, r3
130a4: 1afffffa bne 13094 <free@plt+0x26b8>
130a8: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
130ac: e1540003 cmp r4, r3
130b0: c3a03013 movgt r3, #19
130b4: c5863000 strgt r3, [r6]
130b8: caffffc0 bgt 12fc0 <free@plt+0x25e4>
130bc: e51b30bc ldr r3, [fp, #-188] ; 0xffffff44
130c0: e1a02004 mov r2, r4
130c4: e2438001 sub r8, r3, #1
130c8: e1a03008 mov r3, r8
130cc: e5951040 ldr r1, [r5, #64] ; 0x40
130d0: e1a00007 mov r0, r7
130d4: ebfff628 bl 1097c <sprintf@plt>
130d8: e3a01000 mov r1, #0
130dc: e1a00007 mov r0, r7
[*] Function sprintf used 11 times ubidetach
