[*] Binary protection state of ssh-keygen
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of ssh-keygen
ldr.w r3, [r2, 0x448]
str r3, [sp, 4]
ldr.w r3, [r2, 0x440]
ldr r2, [0x0000b124]
str r3, [sp]
ldr r3, [sp, 0x20]
add r2, pc
ldr r1, [r7]
ldr r0, [r3]
mov r3, sl
bl 0x1d434
mov r4, r0
cmp r0, 0
bne.w 0xaf96
ldr.w r0, [sb]
blx 0x4058
adds r2, r0, 1
beq.w 0xb01c
mov.w r1, 0x1a4
str r0, [sp, 0x48]
blx sym.imp.__vasprintf_chk
ldr r3, [sp, 0x48]
mov r0, r3
--
add r1, pc
bl 0x3302c
cmp.w r0, 0x1000
bhs.w 0xb5be
movs r0, 0x3f
blx sym.imp.fflush
mov r0, sl
blx 0x4058
cmp.w r0, -1
mov r8, r0
beq.w 0xb800
ldr r1, [0x0000b8ac]
add r1, pc
blx sym.imp.__syslog_chk
str r0, [r7, -0x8c]
cmp r0, 0
beq.w 0xb834
ldr r1, [r7, -0x60]
mov r0, r8
and r1, r1, 0x1a4
blx sym.imp.__vasprintf_chk
ldr r3, [0x0000b8b0]
add.w r2, sp, 0x20c0
--
ldr r1, [r4, 8]
beq 0x179ec
ldr r0, [sp, 0x18]
blx 0x4478
b 0x17944
cmp.w fp, 1
ldr r1, [r4, 0xc]
beq 0x17a14
ldr r0, [sp, 0x18]
blx 0x3f40
b 0x17944
ldr r3, [sp, 0x14]
cmp r3, 0
beq 0x1790e
mov r0, r4
bl 0x16690
mov r6, r0
cmp r0, 0
beq 0x17982
b 0x1790e
blx sym.imp.__printf_chk
str r0, [sp, 0x18]
cmp r0, 0
--
str r0, [sp, 0xc]
add r1, pc
ldr r0, [0x0002a014]
adds r1, 0x48
ldr.w r8, [0x0002a018]
add r3, pc
ldr.w sb, [0x0002a01c]
str r3, [sp, 8]
add r0, pc
str r2, [sp, 4]
movs r3, 1
movs r2, 0x58
add r8, pc
str r4, [sp]
add sb, pc
add.w r8, r8, 0x48
bl 0x200ec
b 0x29ffc
ldr r4, [0x0002a020]
movs r6, 0
blx sym.imp.__snprintf_chk
movs r5, 2
mov r7, r0
[*] Function printf used 4 times ssh-keygen
