[*] Binary protection state of wpa_supplicant

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function fprintf tear down of wpa_supplicant

cmp r0, 0
beq 0x3b5cc
ldr r5, [0x0003b6a0]
movs r2, 5
mov r3, r2
movs r7, 0
str r2, [sp, 0x10]
add r5, pc
ldr r0, [0x0003b6a4]
mov r2, r5
mov r1, r6
add r0, pc
bl 0x3b2f8
ldr r2, [sp, 0xc]
movs r3, 0
mov r1, r5
mov r0, r6
str.w sb, [sp]
str r2, [sp, 4]
ldr r2, [sp, 0x10]
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3b65e
--
movw r3, 0x2001
mov r1, r6
mov r0, r4
mov r5, fp
blx 0x6f88
ldr r3, [sp, 0x10]
cmp.w fp, 0
beq.w 0x3c08c
ldr r0, [0x0003c0c8]
mov r2, fp
mov r1, r7
add r0, pc
bl 0x3b2f8
ldr r3, [sp, 0xc]
mov r1, fp
ldr r2, [sp, 0x10]
mov r0, r7
str.w sl, [sp]
str r3, [sp, 4]
movs r3, 0
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3bfce
--
beq 0x3c92e
movs r3, 1
ldr r1, [r6]
cbnz r3, 0x3c948
mov r2, r1
mov r0, sl
ldr r1, [sp, 8]
str r3, [sp, 0xc]
bl 0x326f0
ldr r3, [sp, 0xc]
cmp r0, 0
beq 0x3c98e
ldr r7, [sp, 8]
movs r2, 5
ldr r0, [r4, 4]
ldr r1, [0x0003c9ec]
str r7, [sp]
ldr r7, [r6]
add r1, pc
str r7, [sp, 4]
blx sym.imp.__fprintf_chk
cmp r0, 0
bge 0x3c8b4
--
add r1, pc
bl 0xe4b4
b 0x3c8b4
ldrh.w r3, [sp, 0x98]
movw r2, 0x4843
cmp r3, r2
bne 0x3c8e6
ldrb.w r3, [sp, 0x9a]
cmp r3, 0
bne 0x3c8e6
ldr r1, [r6]
cmp r3, 0
beq 0x3c8ec
str r1, [sp, 4]
movs r3, 0
ldr r1, [sp, 8]
movs r2, 5
str r1, [sp]
mov r1, fp
ldr r0, [r4, 4]
blx sym.imp.__fprintf_chk
cmp r0, 0
bge 0x3c8b4
--
movs r0, 2
add r1, pc
bl 0xe4b4
b 0x3c8b4
blx 0x7150
ldr r0, [r0]
blx 0x6494
ldr r1, [0x0003c9f8]
mov r2, r0
movs r0, 5
add r1, pc
bl 0xe4b4
b 0x3c8b4
ldr r7, [sp, 8]
movs r2, 3
ldr r5, [r6]
ldr r1, [0x0003c9fc]
ldr r0, [r4, 4]
strd r7, r5, [sp]
add r1, pc
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3c9c0
--
ldr r0, [r4]
rev16 r2, r2
ldrh r4, [r4, 4]
strh.w r2, [sp, 0xa]
movs r2, 6
str r3, [sp, 0x10]
strb.w r2, [sp, 0x13]
movs r2, 0x14
str r2, [sp, 4]
str r3, [sp, 0x18]
strh.w r4, [sp, 0x18]
ldr.w r4, [ip, 0x18]
str r0, [sp, 0x14]
ldr r2, [sp, 0x28]
str r4, [sp, 0xc]
add r4, sp, 8
ldr.w r0, [ip]
str r4, [sp]
movs r4, 0x11
strh.w r4, [sp, 8]
blx sym.imp.__fprintf_chk
subs r4, r0, 0
blt 0x5467c

[*] Function fprintf used 6 times wpa_supplicant