[*] Binary protection state of mod_status.so

  
  	Partial RELRO  No Canary found   NX disabled  DSO          No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of mod_status.so

bl loc.imp.buffer_is_equal_string
cmp r0, 0
beq 0x1644
ldr r0, [fp, 0x4c]
bl loc.imp.chunkqueue_append_buffer_open
ldr r1, [0x000019f4]
mov r2, 0x10
add r1, pc, r1
ldr sl, [0x000019f8]
ldr r8, [0x000019fc]
add sb, sp, 0x54
add sl, pc, sl
add r8, pc, r8
mov r4, r0
bl loc.imp.buffer_append_string_len
ldrd r2, r3, [r5, 0x88]
mov r1, 0x1f
strd r2, r3, [sp]
mov r0, sb
mov r2, sl
bl sym.imp.snprintf
mov r1, sb
mov r0, r4
bl loc.imp.buffer_append_string
mov r2, 1
mov r1, r8
mov r0, r4
bl loc.imp.buffer_append_string_len
ldr r1, [0x00001a00]
mov r2, 0xe
add r1, pc, r1
mov r0, r4
bl loc.imp.buffer_append_string_len
ldr r3, [0x00001a04]
ldrd r0, r1, [r5, 0x80]
ldr r5, [0x00001a08]
mov r2, 0
bl 0x3370
mov r2, sl
add r5, pc, r5
strd r0, r1, [sp]
mov r1, 0x1f
mov r0, sb
bl sym.imp.snprintf
mov r1, sb
mov r0, r4
--
bl sym.imp.memcmp
subs r2, r0, 0
addeq r1, r7, 6
addeq ip, r7, 5
beq 0x197c
ldr r1, [0x00001a3c]
mov r2, 0x14
add r1, pc, r1
mov r0, r4
ldr sb, [0x00001a40]
bl loc.imp.buffer_append_string_len
ldrd r2, r3, [r5, 0x88]
ldr r7, [0x00001a44]
add r8, sp, 0x54
add sb, pc, sb
strd r2, r3, [sp]
mov r1, 0x1f
mov r2, sb
mov r0, r8
add r7, pc, r7
bl sym.imp.snprintf
mov r1, r8
mov r0, r4
bl loc.imp.buffer_append_string
mov r1, r7
mov r2, 2
mov r0, r4
bl loc.imp.buffer_append_string_len
ldr r1, [0x00001a48]
mov r2, 0x11
add r1, pc, r1
mov r0, r4
bl loc.imp.buffer_append_string_len
ldr r3, [0x00001a04]
ldrd r0, r1, [r5, 0x80]
mov r2, 0
bl 0x3370
mov r2, sb
add sl, r5, 0x68
strd r0, r1, [sp]
mov r1, 0x1f
mov r0, r8
bl sym.imp.snprintf
mov r1, r8
mov r0, r4
--
add r1, pc, r1
mov r0, r4
bl loc.imp.buffer_append_string_len
ldr r1, [0x00001ae8]
mov r2, 0x27
add r1, pc, r1
mov r0, r4
bl loc.imp.buffer_append_string_len
ldrd r2, r3, [r5, 0x80]
mov r1, r7
strd r2, r3, [sp, 0x28]
mov r0, sb
mov r2, 0x400
bl 0xb90
ldrd r2, r3, [sp, 0x28]
mov r1, 0x20
strd r2, r3, [sp]
ldr r2, [0x00001aec]
mov r0, r8
add r2, pc, r2
bl sym.imp.snprintf
mov r1, r8
mov r0, r4
--
bl loc.imp.buffer_append_string_len
ldr r3, [r6, 0xfc]
ldr r0, [r6, 0xf0]
sub r0, r0, r3
bl 0x328c
mov r3, r1
mov r2, r0
ldrd r0, r1, [r5, 0x80]
bl 0x35dc
mov r2, 0x400
strd r0, r1, [sp, 0x28]
mov r1, r7
mov r0, sb
bl 0xb90
ldrd r2, r3, [sp, 0x28]
mov r1, 0x20
strd r2, r3, [sp]
ldr r2, [0x00001b0c]
mov r0, r8
add r2, pc, r2
bl sym.imp.snprintf
mov r1, r8
mov r0, r4
--
bne 0x22fc
ldr r3, [0x00001b28]
mov r2, 0
bl 0x35dc
mov r2, 0x27
strd r0, r1, [sp, 0x28]
ldr r1, [0x00001b2c]
mov r0, r4
add r1, pc, r1
bl loc.imp.buffer_append_string_len
mov r2, 0x400
mov r1, r7
mov r0, sb
bl 0xb90
ldrd r2, r3, [sp, 0x28]
mov r1, 0x20
strd r2, r3, [sp]
ldr r2, [0x00001b30]
mov r0, r8
add r2, pc, r2
bl sym.imp.snprintf
mov r1, r8
mov r0, r4

[*] Function printf used 7 times mod_status.so