[*] Binary protection state of wpa_supplicant

  
  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function printf tear down of wpa_supplicant

mov.w fp, 0
mov.w lr, 0
pop {r1}
mov r2, sp
push {r2}
push {r0}
ldr.w sl, [0x00007840]
adr r3, 0x14
add sl, r3
mov.w r3, 0
push {r3}
ldr r0, [0x00007844]
ldr.w r0, [sl, r0]
blx sym.imp.snprintf
blx 0x6814
asrs r0, r4, 3
--
cmp r0, 0
beq 0x3b5cc
ldr r5, [0x0003b6a0]
movs r2, 5
mov r3, r2
movs r7, 0
str r2, [sp, 0x10]
add r5, pc
ldr r0, [0x0003b6a4]
mov r2, r5
mov r1, r6
add r0, pc
bl 0x3b2f8
ldr r2, [sp, 0xc]
movs r3, 0
mov r1, r5
mov r0, r6
str.w sb, [sp]
str r2, [sp, 4]
ldr r2, [sp, 0x10]
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3b65e
--
pop.w {r4, r5, r6, r7, r8, pc}
movs r2, 0x6c
mov r1, r5
add.w r0, sp, 0xe
bl 0x14b80
ldr r0, [r4, 4]
movs r2, 0x6e
mov r1, r6
blx 0x6a60
cmp r0, 0
blt 0x3b88e
ldr r1, [0x0003b9b8]
mov r2, r5
movs r0, 2
add r1, pc
bl 0xe4b4
ldr r6, [r7, 0x20]
cmp r6, 0
beq 0x3b83c
mov r0, r6
blx sym.imp.__printf_chk
cmp r0, 0
beq.w 0x3b918
--
add r1, pc
blx 0x6364
mov r8, r0
cmp r0, 0
bne 0x3bad6
ldr r1, [0x0003bdb4]
add.w sl, r7, 4
mov r0, sl
add r1, pc
blx sym.imp.SSL_read
mov r4, r0
cmp r0, 0
beq.w 0x3bc28
mov.w r1, 0x1f8
mov r0, sl
strb r8, [r4], 7
blx sym.imp.EVP_des_ede3_cbc
cmp r0, 0
blt.w 0x3bc3c
mov r0, r4
blx sym.imp.__printf_chk
cmp r0, 0
beq.w 0x3bc7a
--
movw r3, 0x2001
mov r1, r6
mov r0, r4
mov r5, fp
blx 0x6f88
ldr r3, [sp, 0x10]
cmp.w fp, 0
beq.w 0x3c08c
ldr r0, [0x0003c0c8]
mov r2, fp
mov r1, r7
add r0, pc
bl 0x3b2f8
ldr r3, [sp, 0xc]
mov r1, fp
ldr r2, [sp, 0x10]
mov r0, r7
str.w sl, [sp]
str r3, [sp, 4]
movs r3, 0
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3bfce
--
beq 0x3c92e
movs r3, 1
ldr r1, [r6]
cbnz r3, 0x3c948
mov r2, r1
mov r0, sl
ldr r1, [sp, 8]
str r3, [sp, 0xc]
bl 0x326f0
ldr r3, [sp, 0xc]
cmp r0, 0
beq 0x3c98e
ldr r7, [sp, 8]
movs r2, 5
ldr r0, [r4, 4]
ldr r1, [0x0003c9ec]
str r7, [sp]
ldr r7, [r6]
add r1, pc
str r7, [sp, 4]
blx sym.imp.__fprintf_chk
cmp r0, 0
bge 0x3c8b4
--
add r1, pc
bl 0xe4b4
b 0x3c8b4
ldrh.w r3, [sp, 0x98]
movw r2, 0x4843
cmp r3, r2
bne 0x3c8e6
ldrb.w r3, [sp, 0x9a]
cmp r3, 0
bne 0x3c8e6
ldr r1, [r6]
cmp r3, 0
beq 0x3c8ec
str r1, [sp, 4]
movs r3, 0
ldr r1, [sp, 8]
movs r2, 5
str r1, [sp]
mov r1, fp
ldr r0, [r4, 4]
blx sym.imp.__fprintf_chk
cmp r0, 0
bge 0x3c8b4
--
movs r0, 2
add r1, pc
bl 0xe4b4
b 0x3c8b4
blx 0x7150
ldr r0, [r0]
blx 0x6494
ldr r1, [0x0003c9f8]
mov r2, r0
movs r0, 5
add r1, pc
bl 0xe4b4
b 0x3c8b4
ldr r7, [sp, 8]
movs r2, 3
ldr r5, [r6]
ldr r1, [0x0003c9fc]
ldr r0, [r4, 4]
strd r7, r5, [sp]
add r1, pc
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3c9c0
--
ldr r0, [r4]
rev16 r2, r2
ldrh r4, [r4, 4]
strh.w r2, [sp, 0xa]
movs r2, 6
str r3, [sp, 0x10]
strb.w r2, [sp, 0x13]
movs r2, 0x14
str r2, [sp, 4]
str r3, [sp, 0x18]
strh.w r4, [sp, 0x18]
ldr.w r4, [ip, 0x18]
str r0, [sp, 0x14]
ldr r2, [sp, 0x28]
str r4, [sp, 0xc]
add r4, sp, 8
ldr.w r0, [ip]
str r4, [sp]
movs r4, 0x11
strh.w r4, [sp, 8]
blx sym.imp.__fprintf_chk
subs r4, r0, 0
blt 0x5467c

[*] Function printf used 9 times wpa_supplicant