[*] Binary protection state of ld-uClibc-1.0.31.so
Full RELRO No Canary found NX disabled DSO No RPATH No RUNPATH Symbols
[*] Function printf tear down of ld-uClibc-1.0.31.so
andeq r3, r0, r4, lsl lr
ldrdeq r3, r4, [r0], -lr
ldrdeq r3, r4, [r0], -r2
stclgt p12, c12, [ip], {0xcd}
mov r2, r0
push {r4, r7, fp, lr}
bl sym.__aeabi_read_tp
ldr r3, [r2, 0x28]
ldr r1, [r0]
add r3, r0, r3
ldr ip, [r1, -8]
ldr r0, [r2, 0x2c]
ldr r4, [0x00002074]
cmp r0, ip
add r4, pc, r4
add fp, sp, 0xc
bls 0x2018
ldr r1, [0x00002078]
mov r0, 2
add r1, pc, r1
bl sym._dl_dprintf
mov r7, 1
mov r0, 0x1e
--
ldr r3, [0x00002138]
ldr r7, [r0, r1, lsl 3]
ldr r3, [r4, r3]
ldr r6, [r2]
ldr r1, [r3]
mov r3, 0
str r3, [sp]
add r1, r1, 0x40
mov r3, 1
mov r0, r5
bl sym._dl_find_hash
subs r3, r0, 0
bne 0x2128
ldr r3, [0x0000213c]
ldr r1, [0x00002140]
ldr r2, [r4, r3]
add r1, pc, r1
mov r3, r5
ldr r2, [r2]
mov r0, 2
bl sym._dl_dprintf
mov r0, 1
mov r7, r0
--
bne 0x21c0
mov r0, r6
sub sp, fp, 0x20
pop {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r5, [r4, 4]
ldr r3, [fp, -0x28]
str sl, [sp]
mov r2, r4
ldr r1, [fp, -0x30]
mov r0, r7
ldr ip, [fp, 4]
blx ip
subs sb, r0, 0
beq 0x226c
ldr r3, [0x00002284]
lsr r5, r5, 8
ldr r3, [r8, r3]
ldr r1, [fp, -0x34]
ldr r2, [r3]
mov r0, 2
bl sym._dl_dprintf
cmp r5, 0
beq 0x2224
ldr r3, [fp, -0x28]
ldr r1, [fp, -0x3c]
ldr r2, [r3, r5, lsl 4]
mov r0, 2
add r2, sl, r2
bl sym._dl_dprintf
cmp sb, 0
bge 0x225c
ldr r1, [0x00002288]
ldrb r2, [r4, 4]
add r1, pc, r1
mov r0, 2
bl sym._dl_dprintf
mov r7, 1
rsb r0, sb, 0
svc 0
ldr r3, [0x0000228c]
rsb r0, r0, 0
ldr r3, [r8, r3]
str r0, [r3]
ldr r1, [fp, -0x38]
mov r0, 2
bl sym._dl_dprintf
add r6, r6, sb
add r4, r4, 8
--
mov r7, 0xc0
svc 0
cmn r0, 0x1000
ldrhi r3, [0x00002564]
rsbhi r0, r0, 0
ldrhi r3, [r6, r3]
strhi r0, [r3]
movhi r0, r4
ldr r3, [0x00002568]
cmn r0, 1
add r3, pc, r3
str r0, [r3, 0xc]
str r0, [r3, 0x10]
bne 0x2534
ldr r3, [0x0000256c]
ldr r1, [0x00002570]
ldr r3, [r6, r3]
add r1, pc, r1
ldr r2, [r3]
mov r0, 2
bl sym._dl_dprintf
mov r7, 1
mov r0, 0x14
--
ldr r3, [0x00002ce8]
rsb r0, r0, 0
ldr r3, [r5, r3]
str r0, [r3]
strb r2, [r3], 1
cmp r3, r4
bne 0x2cd4
pop {r4, r5, r6, r7, fp, pc}
andeq r4, r1, ip, asr 5
andeq r0, r0, ip, lsr r0
push {r4, r7, fp, lr}
ldr r4, [0x00002d34]
add fp, sp, 0xc
bl sym._dl_try_allocate_static_tls
add r4, pc, r4
cmp r0, 0
popeq {r4, r7, fp, pc}
ldr r1, [0x00002d38]
mov r0, 2
add r1, pc, r1
bl sym._dl_dprintf
mov r7, 1
mov r0, 0x1e
--
b 0x2f34
b 0x2f34
b 0x2f34
b 0x2f34
b 0x2f34
b 0x2f34
b 0x2f34
b 0x2eec
b 0x2ef8
b 0x2f00
b 0x2ebc
b 0x2ef0
b 0x2ef0
b 0x2eac
ldr r3, [r7, 4]
mov r2, r8
b 0x2e08
ldr r1, [0x00002f40]
mov r0, 2
add r1, pc, r1
bl sym._dl_dprintf
mov r0, 1
mov r7, r0
--
bhi 0x3030
ldr r4, [r6, 4]
sub r7, r7, r3
cmp r4, 0
bne 0x2fe0
mov r0, 0x2f0
bl sym._dl_malloc
cmp r0, 0
mov r1, r0
str r0, [r6, 4]
bne 0x2fe8
ldr r3, [0x00003040]
ldr r1, [0x00003044]
ldr r2, [r5, r3]
add r1, pc, r1
ldr r3, [r2]
mov r0, 2
add r3, r3, 1
str r3, [r2]
mov r7, 1
bl sym._dl_dprintf
mov r0, 0x7f
svc 0
--
ldr r2, [0x000031a4]
ldr r2, [r6, r2]
ldr r2, [r2]
ldr r1, [r2]
cmp r1, ip
bls 0x3124
mov r1, 0xc
mla r3, r1, ip, r2
ldr r4, [r3, 0x10]
ldr r1, [r4, 0x1c]
ldr r0, [r4, 0x20]
bl sym._dl_memalign
cmp r0, 0
bne 0x3130
ldr r2, [0x000031a8]
ldr r1, [0x000031ac]
ldr r3, [0x000031b0]
add r2, pc, r2
add r1, pc, r1
mov r0, 2
bl sym._dl_dprintf
mov r0, 1
mov r7, r0
--
and r0, r2, r3
add r1, r3, r1
and r1, r1, r2
cmp r0, r1
add fp, sp, 0xc
popeq {r4, r7, fp, pc}
sub r1, r1, r0
mov r2, 1
mov r7, 0x7d
svc 0
cmn r0, 0x1000
bls 0x3258
ldr r3, [0x0000326c]
rsb r0, r0, 0
ldr r3, [r4, r3]
str r0, [r3]
ldr r1, [0x00003270]
ldr r2, [ip, 4]
add r1, pc, r1
mov r0, 2
bl sym._dl_dprintf
mov r7, 1
mov r0, 0
--
mvn r4, 0
mov r5, r6
mov r7, 0xc0
svc 0
cmn r0, 0x1000
mov sl, r0
bls 0x38ec
ldr r3, [0x000041c0]
ldr r1, [0x000041d0]
ldr r4, [r8, r3]
rsb r3, r0, 0
str r3, [r4]
ldr r3, [0x000041d4]
add r1, pc, r1
ldr r2, [r8, r3]
ldr r3, [fp, -0x10c]
mov r0, 2
str r3, [sp]
mov r3, 0x240
ldr r2, [r2]
bl sym._dl_dprintf
ldr r3, [0x000041c4]
mov r7, 6
--
mov r1, sl
ldr r2, [r3]
mov r7, 3
svc 0
cmn r0, 0x1000
ldrhi r3, [0x000041c0]
rsbhi r0, r0, 0
ldrhi r3, [r8, r3]
strhi r0, [r3]
ldr r2, [sl]
ldr r3, [0x000041d8]
cmp r2, r3
beq 0x39a8
ldr r3, [0x000041d4]
ldr r1, [0x000041dc]
ldr r2, [r8, r3]
add r1, pc, r1
ldr r3, [fp, -0x10c]
ldr r2, [r2]
mov r0, 2
bl sym._dl_dprintf
ldr r3, [0x000041c4]
mov r2, 3
--
str r0, [r3]
b 0x3728
ldr r2, [sl, 0x10]
ldr r3, [0x000041e0]
cmp r2, r3
beq 0x39f8
ldrh r3, [sl, 0x10]
ldr r1, [0x000041e4]
cmp r3, 3
ldr r3, [0x000041c4]
moveq r2, 4
ldr r3, [r8, r3]
movne r2, 5
str r2, [r3]
ldr r3, [0x000041d4]
add r1, pc, r1
ldr r2, [r8, r3]
mov r0, 2
ldr r3, [fp, -0x10c]
ldr r2, [r2]
bl sym._dl_dprintf
b 0x3958
mov r3, 1
--
mvn r4, 0
mov r5, r2
mov r7, 0xc0
svc 0
cmn r0, 0x1000
mov sb, r0
bls 0x3b90
ldr r3, [0x000041c0]
rsb r2, r0, 0
ldr r3, [r8, r3]
str r2, [r3]
ldr r3, [0x000041d4]
ldr r1, [0x000041ec]
ldr r2, [r8, r3]
ldr r3, [fp, -0x10c]
mov r0, 2
str r3, [sp]
add r1, pc, r1
mov r3, 0x2a8
ldr r2, [r2]
bl sym._dl_dprintf
ldr r3, [0x000041c4]
mov r7, 6
ldr r3, [r8, r3]
ldr r0, [fp, -0xfc]
str r7, [r3]
b 0x3960
ldr r0, [r4]
cmp r0, 2
bne 0x3b18
ldr r3, [fp, -0x104]
cmp r3, 0
beq 0x3b10
ldr r3, [0x000041d4]
ldr r1, [fp, -0x114]
ldr r2, [r8, r3]
ldr r3, [fp, -0x10c]
ldr r2, [r2]
bl sym._dl_dprintf
ldr r3, [r4, 8]
str r3, [fp, -0x104]
--
ldrne r2, [fp, -0x114]
addne r3, r3, r2
strne r3, [fp, -0x104]
ldr r3, [fp, -0x104]
cmp r3, 0
movne r3, 0
subne r1, fp, 0xb0
movne r2, r3
bne 0x3f38
ldr r3, [0x000041c4]
mov r2, 7
ldr r3, [r8, r3]
ldr r1, [0x000041fc]
str r2, [r3]
ldr r3, [0x000041d4]
add r1, pc, r1
ldr r2, [r8, r3]
mov r0, 2
ldr r3, [fp, -0x10c]
ldr r2, [r2]
bl sym._dl_dprintf
ldr r3, [fp, -0xf8]
mov r0, sl
--
cmp r3, 0
moveq r3, 0x1000
str r3, [r2]
str r2, [fp, -0x174]
ldr r2, [0x000056b4]
mov r7, 0
add r2, pc, r2
str r3, [r2, 0xc]
ldr r3, [fp, 4]
str r7, [r2, 0x10]
ldr r0, [r3]
bl 0x32b4
ldr r3, [0x000056b8]
ldr r2, [r5, 0x4c]
ldr r3, [r4, r3]
cmp r2, r3
bne 0x47d4
ldr r1, [0x000056bc]
mov r0, 2
add r1, pc, r1
bl sym._dl_dprintf
mov r0, 1
mov r7, r0
--
ldrb r3, [r2, 1]!
cmp r3, 0x2f
beq 0x4e60
cmp r3, 0
bne 0x4e0c
mov r0, 0x4000000
ldr r3, [fp, -0x16c]
mov r2, 0
str r3, [sp]
sub r1, fp, 0x140
mov r3, r6
bl sym._dl_load_shared_library
cmp r0, 0
bne 0x4eb0
ldr r3, [fp, -0x150]
cmp r3, 0
beq 0x4e90
mov r2, r6
mov r1, sb
mov r0, 1
bl sym._dl_dprintf
strb r8, [r7]
mov r6, r7
ldrb r2, [r7], 1
cmp r2, 0x20
cmpne r2, 0x3a
moveq r3, 1
movne r3, 0
cmp r2, 9
orreq r3, r3, 1
cmp r3, 0
bne 0x4e64
b 0x4c04
ldr r3, [0x0000571c]
mov r1, sl
ldr r2, [r4, r3]
mov r0, 2
mov r3, r6
ldr r2, [r2]
bl sym._dl_dprintf
b 0x4e60
ldr r3, [fp, -0x154]
--
tst r3, 0x10
bne 0x4e60
ldr r3, [0x0000571c]
sub ip, r6, 1
ldr r3, [r4, r3]
ldr r2, [r3]
sub r2, r2, 1
ldrb r1, [r2, 1]!
ldrb r3, [ip, 1]!
cmp r1, 0
bne 0x4f24
rsb r3, r3, 0
cmp r3, 0
beq 0x4e60
ldr r3, [r0]
mov r2, r6
str r3, [sp]
ldr r1, [fp, -0x168]
ldr r3, [r0, 4]
mov r0, 1
bl sym._dl_dprintf
b 0x4e60
cmp r1, r3
--
sub sp, sp, 0x10
add r3, sp, 8
str r0, [sp, 0xc]
str r2, [sp, 8]
str r3, [r8, 0x5c]
ldr r3, [fp, -0x154]
orr r3, r3, 0x100
str r3, [r0, 0x50]
ldr r3, [fp, -0x150]
cmp r3, 0
beq 0x5300
ldrh r3, [r0, 0x4e]
tst r3, 0x10
bne 0x5300
ldr r3, [r0]
mov r2, r7
str r3, [sp]
ldr r1, [fp, -0x164]
ldr r3, [r0, 4]
mov r0, 1
bl sym._dl_dprintf
b 0x5300
mov r2, r1
--
b 0x51a4
cmp r1, r2
beq 0x51f0
sub r2, r1, r2
b 0x5204
ldr r3, [fp, -0x16c]
mov r2, r8
str r3, [sp]
sub r1, fp, 0x140
mov r3, r7
mov r0, 0
bl sym._dl_load_shared_library
cmp r0, 0
bne 0x5248
ldr r3, [fp, -0x150]
cmp r3, 0
beq 0x5308
mov r2, r7
ldr r1, [fp, -0x168]
mov r0, 1
bl sym._dl_dprintf
add sb, sb, 8
b 0x516c
ldr r3, [0x0000571c]
ldr r1, [0x0000575c]
ldr r2, [r4, r3]
mov r0, 2
mov r3, r7
ldr r2, [r2]
add r1, pc, r1
bl sym._dl_dprintf
mov r0, 0x10
mov r7, 1
[*] Function printf used 25 times ld-uClibc-1.0.31.so
