[*] Binary protection state of ubinfo
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function sprintf tear down of ubinfo
11df8: e3a03016 mov r3, #22
11dfc: e5803000 str r3, [r0]
11e00: e3e00000 mvn r0, #0
11e04: e28dd01c add sp, sp, #28
11e08: e8bd8030 pop {r4, r5, pc}
11e0c: 000260d0 ldrdeq r6, [r2], -r0
11e10: 00015129 andeq r5, r1, r9, lsr #2
11e14: 000151ef andeq r5, r1, pc, ror #3
11e18: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11e1c: e28db014 add fp, sp, #20
11e20: e1a06001 mov r6, r1
11e24: e1a04002 mov r4, r2
11e28: e1a05000 mov r5, r0
11e2c: ebfffb42 bl 10b3c <strlen@plt>
11e30: e1a02006 mov r2, r6
11e34: e1a01005 mov r1, r5
11e38: e2800039 add r0, r0, #57 ; 0x39
11e3c: e3c00007 bic r0, r0, #7
11e40: e04dd000 sub sp, sp, r0
11e44: e1a0000d mov r0, sp
11e48: ebfffb32 bl 10b18 <sprintf@plt>
11e4c: e1a01004 mov r1, r4
11e50: e1a0000d mov r0, sp
11e54: ebffffd2 bl 11da4 <free@plt+0x1220>
11e58: e24bd014 sub sp, fp, #20
11e5c: e8bd88f0 pop {r4, r5, r6, r7, fp, pc}
11e60: e92d48f0 push {r4, r5, r6, r7, fp, lr}
11e64: e28db014 add fp, sp, #20
11e68: e1a06001 mov r6, r1
11e6c: e1a07002 mov r7, r2
11e70: e1a04003 mov r4, r3
11e74: e1a05000 mov r5, r0
11e78: ebfffb2f bl 10b3c <strlen@plt>
11e7c: e1a03007 mov r3, r7
11e80: e1a02006 mov r2, r6
11e84: e1a01005 mov r1, r5
11e88: e280006b add r0, r0, #107 ; 0x6b
11e8c: e3c00007 bic r0, r0, #7
11e90: e04dd000 sub sp, sp, r0
11e94: e1a0000d mov r0, sp
11e98: ebfffb1e bl 10b18 <sprintf@plt>
11e9c: e1a01004 mov r1, r4
11ea0: e1a0000d mov r0, sp
--
122ec: eaffffe8 b 12294 <free@plt+0x1710>
122f0: 00014c36 andeq r4, r1, r6, lsr ip
122f4: 00015129 andeq r5, r1, r9, lsr #2
122f8: 000152fd strdeq r5, [r1], -sp
122fc: 000260d0 ldrdeq r6, [r2], -r0
12300: 00015330 andeq r5, r1, r0, lsr r3
12304: e92d48f0 push {r4, r5, r6, r7, fp, lr}
12308: e5904000 ldr r4, [r0]
1230c: e28db014 add fp, sp, #20
12310: e1a00004 mov r0, r4
12314: e1a06003 mov r6, r3
12318: e1a07001 mov r7, r1
1231c: e1a05002 mov r5, r2
12320: ebfffa05 bl 10b3c <strlen@plt>
12324: e1a02007 mov r2, r7
12328: e1a01004 mov r1, r4
1232c: e2800039 add r0, r0, #57 ; 0x39
12330: e3c00007 bic r0, r0, #7
12334: e04dd000 sub sp, sp, r0
12338: e1a0000d mov r0, sp
1233c: ebfff9f5 bl 10b18 <sprintf@plt>
12340: e1a02006 mov r2, r6
12344: e1a01005 mov r1, r5
--
12e44: e59f20c0 ldr r2, [pc, #192] ; 12f0c <free@plt+0x2388>
12e48: e59f10d0 ldr r1, [pc, #208] ; 12f20 <free@plt+0x239c>
12e4c: e5900000 ldr r0, [r0]
12e50: ebfff703 bl 10a64 <fprintf@plt>
12e54: ebfff732 bl 10b24 <__errno_location@plt>
12e58: e3a03013 mov r3, #19
12e5c: eaffffcd b 12d98 <free@plt+0x2214>
12e60: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
12e64: e1530009 cmp r3, r9
12e68: 1affffed bne 12e24 <free@plt+0x22a0>
12e6c: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
12e70: e1540003 cmp r4, r3
12e74: caffffee bgt 12e34 <free@plt+0x22b0>
12e78: e3570000 cmp r7, #0
12e7c: 03a00001 moveq r0, #1
12e80: 0affffb6 beq 12d60 <free@plt+0x21dc>
12e84: e2473001 sub r3, r7, #1
12e88: e1a02004 mov r2, r4
12e8c: e5961040 ldr r1, [r6, #64] ; 0x40
12e90: e1a00008 mov r0, r8
12e94: ebfff71f bl 10b18 <sprintf@plt>
12e98: e3a01000 mov r1, #0
12e9c: e1a00008 mov r0, r8
--
132c4: ebfff5bc bl 109bc <ioctl@plt>
132c8: e2900000 adds r0, r0, #0
132cc: 13a00001 movne r0, #1
132d0: e2600000 rsb r0, r0, #0
132d4: e28dd014 add sp, sp, #20
132d8: e49df004 pop {pc} ; (ldr pc, [sp], #4)
132dc: 40044f02 andmi r4, r4, r2, lsl #30
132e0: e92d4830 push {r4, r5, fp, lr}
132e4: e28db00c add fp, sp, #12
132e8: e24dd068 sub sp, sp, #104 ; 0x68
132ec: e5904010 ldr r4, [r0, #16]
132f0: e1a05001 mov r5, r1
132f4: e1a00004 mov r0, r4
132f8: ebfff60f bl 10b3c <strlen@plt>
132fc: e1a02005 mov r2, r5
13300: e1a01004 mov r1, r4
13304: e2800039 add r0, r0, #57 ; 0x39
13308: e3c00007 bic r0, r0, #7
1330c: e04dd000 sub sp, sp, r0
13310: e1a0000d mov r0, sp
13314: ebfff5ff bl 10b18 <sprintf@plt>
13318: e24b1074 sub r1, fp, #116 ; 0x74
1331c: e1a0000d mov r0, sp
--
1358c: ebfffa21 bl 11e18 <free@plt+0x1294>
13590: e3500000 cmp r0, #0
13594: 1affff77 bne 13378 <free@plt+0x27f4>
13598: e2842048 add r2, r4, #72 ; 0x48
1359c: e1a01006 mov r1, r6
135a0: e5950030 ldr r0, [r5, #48] ; 0x30
135a4: ebfffa1b bl 11e18 <free@plt+0x1294>
135a8: e3500000 cmp r0, #0
135ac: 1affff71 bne 13378 <free@plt+0x27f4>
135b0: e595802c ldr r8, [r5, #44] ; 0x2c
135b4: e1a0900d mov r9, sp
135b8: e1a00008 mov r0, r8
135bc: ebfff55e bl 10b3c <strlen@plt>
135c0: e1a02006 mov r2, r6
135c4: e1a01008 mov r1, r8
135c8: e2800039 add r0, r0, #57 ; 0x39
135cc: e3c00007 bic r0, r0, #7
135d0: e04dd000 sub sp, sp, r0
135d4: e28d7008 add r7, sp, #8
135d8: e1a00007 mov r0, r7
135dc: ebfff54d bl 10b18 <sprintf@plt>
135e0: e2841040 add r1, r4, #64 ; 0x40
135e4: e1a00007 mov r0, r7
--
1386c: e1a05001 mov r5, r1
13870: e1a06002 mov r6, r2
13874: e3a01000 mov r1, #0
13878: e3a020b0 mov r2, #176 ; 0xb0
1387c: e1a07000 mov r7, r0
13880: e1a00009 mov r0, r9
13884: e1a04003 mov r4, r3
13888: ebfff493 bl 10adc <emset@plt>
1388c: e597a048 ldr sl, [r7, #72] ; 0x48
13890: e8840060 stm r4, {r5, r6}
13894: e1a0000a mov r0, sl
13898: ebfff4a7 bl 10b3c <strlen@plt>
1389c: e1a0800d mov r8, sp
138a0: e1a03006 mov r3, r6
138a4: e1a02005 mov r2, r5
138a8: e1a0100a mov r1, sl
138ac: e280006b add r0, r0, #107 ; 0x6b
138b0: e3c00007 bic r0, r0, #7
138b4: e04dd000 sub sp, sp, r0
138b8: e1a0000d mov r0, sp
138bc: ebfff495 bl 10b18 <sprintf@plt>
138c0: e1a0000d mov r0, sp
138c4: e284200c add r2, r4, #12
138c8: e1a01009 mov r1, r9
138cc: ebfffa56 bl 1222c <free@plt+0x16a8>
138d0: e1a0d008 mov sp, r8
138d4: e3500000 cmp r0, #0
138d8: 0a000003 beq 138ec <free@plt+0x2d68>
138dc: e3e08000 mvn r8, #0
138e0: e1a00008 mov r0, r8
138e4: e24bd020 sub sp, fp, #32
138e8: e8bd8ff0 pop {r4, r5, r6, r7, r8, r9, sl, fp, pc}
138ec: e5979044 ldr r9, [r7, #68] ; 0x44
138f0: e1a00009 mov r0, r9
138f4: ebfff490 bl 10b3c <strlen@plt>
138f8: e1a03006 mov r3, r6
138fc: e1a02005 mov r2, r5
13900: e1a01009 mov r1, r9
13904: e280006b add r0, r0, #107 ; 0x6b
13908: e3c00007 bic r0, r0, #7
1390c: e04dd000 sub sp, sp, r0
13910: e1a0000d mov r0, sp
13914: ebfff47f bl 10b18 <sprintf@plt>
13918: e1a0000d mov r0, sp
1391c: e3a02032 mov r2, #50 ; 0x32
--
13968: e3a03003 mov r3, #3
1396c: e5843010 str r3, [r4, #16]
13970: e1a02006 mov r2, r6
13974: e2843014 add r3, r4, #20
13978: e1a01005 mov r1, r5
1397c: e597004c ldr r0, [r7, #76] ; 0x4c
13980: ebfff936 bl 11e60 <free@plt+0x12dc>
13984: e3500000 cmp r0, #0
13988: 1affffd3 bne 138dc <free@plt+0x2d58>
1398c: e5978050 ldr r8, [r7, #80] ; 0x50
13990: e1a0900d mov r9, sp
13994: e1a00008 mov r0, r8
13998: ebfff467 bl 10b3c <strlen@plt>
1399c: e1a03006 mov r3, r6
139a0: e1a02005 mov r2, r5
139a4: e1a01008 mov r1, r8
139a8: e280006b add r0, r0, #107 ; 0x6b
139ac: e3c00007 bic r0, r0, #7
139b0: e04dd000 sub sp, sp, r0
139b4: e1a0000d mov r0, sp
139b8: ebfff456 bl 10b18 <sprintf@plt>
139bc: e1a0000d mov r0, sp
139c0: e2841018 add r1, r4, #24
--
13a10: e1a02006 mov r2, r6
13a14: e1a01005 mov r1, r5
13a18: e597005c ldr r0, [r7, #92] ; 0x5c
13a1c: ebfff90f bl 11e60 <free@plt+0x12dc>
13a20: e2508000 subs r8, r0, #0
13a24: 1affffac bne 138dc <free@plt+0x2d58>
13a28: e5941028 ldr r1, [r4, #40] ; 0x28
13a2c: e594002c ldr r0, [r4, #44] ; 0x2c
13a30: e5977060 ldr r7, [r7, #96] ; 0x60
13a34: e0c32190 smull r2, r3, r0, r1
13a38: e1a00007 mov r0, r7
13a3c: e1c422f0 strd r2, [r4, #32]
13a40: ebfff43d bl 10b3c <strlen@plt>
13a44: e1a03006 mov r3, r6
13a48: e1a02005 mov r2, r5
13a4c: e1a01007 mov r1, r7
13a50: e280006b add r0, r0, #107 ; 0x6b
13a54: e3c00007 bic r0, r0, #7
13a58: e04dd000 sub sp, sp, r0
13a5c: e1a0000d mov r0, sp
13a60: ebfff42c bl 10b18 <sprintf@plt>
13a64: e1a0000d mov r0, sp
13a68: e3a02081 mov r2, #129 ; 0x81
--
13c84: 0a000004 beq 13c9c <free@plt+0x3118>
13c88: e5963000 ldr r3, [r6]
13c8c: e3530002 cmp r3, #2
13c90: 1affffca bne 13bc0 <free@plt+0x303c>
13c94: e2844001 add r4, r4, #1
13c98: eafffff0 b 13c60 <free@plt+0x30dc>
13c9c: e51b30ac ldr r3, [fp, #-172] ; 0xffffff54
13ca0: e15a0003 cmp sl, r3
13ca4: 1afffffa bne 13c94 <free@plt+0x3110>
13ca8: e51b309c ldr r3, [fp, #-156] ; 0xffffff64
13cac: e1540003 cmp r4, r3
13cb0: c3a03013 movgt r3, #19
13cb4: c5863000 strgt r3, [r6]
13cb8: caffffc0 bgt 13bc0 <free@plt+0x303c>
13cbc: e51b30bc ldr r3, [fp, #-188] ; 0xffffff44
13cc0: e1a02004 mov r2, r4
13cc4: e2438001 sub r8, r3, #1
13cc8: e1a03008 mov r3, r8
13ccc: e5951040 ldr r1, [r5, #64] ; 0x40
13cd0: e1a00007 mov r0, r7
13cd4: ebfff38f bl 10b18 <sprintf@plt>
13cd8: e3a01000 mov r1, #0
13cdc: e1a00007 mov r0, r7
[*] Function sprintf used 11 times ubinfo
