[*] Binary protection state of libwpa_ctrl.so
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of libwpa_ctrl.so
cbz r3, 0x13f0
blx 0x1028
ldr.w fp, [r8]
b 0x1358
blx 0x10c4
ldr r2, [sp, 0x14]
movs r3, 0x6c
mov r1, r3
strd r0, fp, [sp, 8]
str r5, [sp, 4]
mov r0, r6
str r2, [sp]
movs r2, 1
blx 0x1230
mov r3, r0
movs r2, 0x6e
cmp r3, 0x6b
ldr r0, [r4]
add.w r1, r4, 4
bls 0x1388
blx sym.imp.__snprintf_chk
mov r0, r4
blx 0xfa4
movs r4, 0
mov r0, r4
add sp, 0x1c
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
ldr r0, [r4]
str r3, [sp, 0x14]
blx sym.imp.__snprintf_chk
mov r0, r4
blx 0xfa4
--
blx sym.imp.gmtime
subs r2, r0, 0
blt 0x13e8
ldr r0, [r4]
orr r2, r2, 0x800
movs r1, 4
blx sym.imp.gmtime
cmp r0, 0
bge 0x13e8
ldr r0, [0x000014b8]
add r0, pc
blx 0x1040
b 0x13e8
movs r2, 0x6c
mov r1, sl
add.w r0, r4, 0x74
blx sym.imp.random
cmp r0, 0x6b
bls 0x1430
ldr r0, [r4]
blx sym.imp.__snprintf_chk
mov r0, r4
movs r4, 0
blx 0xfa4
b 0x13e8
mov r0, r4
movs r4, 0
blx 0xfa4
b 0x13e8
blx sym.imp.__snprintf_chk
mov r0, r6
blx 0x1028
--
lsrs r4, r1, 0x11
movs r0, r0
lsrs r2, r6, 0xe
movs r0, r0
lsrs r6, r6, 0xd
movs r0, r0
movs r1, 0
b.w 0xfd4
nop
cbz r0, 0x14ee
push {r4, lr}
mov r4, r0
adds r0, 6
blx 0x1028
ldr r0, [r4]
cmp r0, 0
bge 0x14e0
mov r0, r4
pop.w {r4, lr}
b.w 0xfa0
blx sym.imp.__snprintf_chk
mov r0, r4
pop.w {r4, lr}
--
bhi 0x1a7a
subw r0, r0, 0x76c
strd r6, r7, [sp, 8]
str r0, [sp, 0x1c]
add r6, sp, 4
add r0, sp, 8
str r3, [sp, 0x10]
strd r2, r1, [sp, 0x14]
str r4, [sp, 0x20]
strd r4, r4, [sp, 0x24]
strd r4, r4, [sp, 0x2c]
blx 0xf88
mov r3, r0
mov r0, r6
str r3, [sp, 4]
blx 0x10a0
cbz r0, 0x1a58
blx 0xf88
mov r4, r0
mov r0, r6
blx sym.imp.__fprintf_chk
cbz r0, 0x1a58
blx 0xf88
--
blx 0x1018
asrs r2, r3, 0x14
movs r1, r0
lsls r4, r0, 4
movs r0, r0
asrs r6, r0, 0x12
movs r1, r0
push {r4, r5, lr}
mov r4, r1
ldr r1, [0x00001af4]
sub sp, 0xc
mov r3, r0
mov r0, sp
ldr r2, [0x00001af8]
add r1, pc
ldr r2, [r1, r2]
ldr r2, [r2]
str r2, [sp, 4]
mov.w r2, 0
str r3, [sp]
blx sym.imp.__fprintf_chk
cbz r0, 0x1aea
ldr r1, [r0]
[*] Function printf used 7 times libwpa_ctrl.so
