[*] Binary protection state of libwpa_client.so
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function fprintf tear down of libwpa_client.so
blx 0x2508
cmp r0, 0x81
it hi
strbhi r5, [sp, 0x10]
b 0x47d4
add.w sl, sp, 0x10
ldr r3, [sp, 0xc]
movs r2, 1
mov r1, r6
str.w sb, [sp]
mov r0, r4
str r3, [sp, 4]
mov.w r3, -1
blx 0x2144
ldr r1, [0x0000485c]
mov r3, r4
mov r2, sl
mov r5, r0
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x00004860]
add r3, pc
--
blx sb
mov r1, r6
mov r0, r4
blx 0x22c0
ldr r2, [0x00004864]
ldr r3, [0x00004850]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x94]
eors r2, r3
mov.w r3, 0
bne 0x4846
add sp, 0x98
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
add sp, 8
bx lr
ldr r1, [0x00004868]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x481c
blx 0x21a0
--
mov r1, r5
mov r0, r4
blx 0x22c0
ldr r2, [0x00004920]
ldr r3, [0x0000491c]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4902
add sp, 0x10
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
add sp, 8
bx lr
blx 0x21a0
ldr r1, [0x00004924]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x48e4
nop
--
movs r2, 1
strd sb, r4, [sp]
str r4, [sp, 8]
blx 0x2144
adds r6, r0, 1
mov r0, r6
blx 0x2264
cbz r0, 0x49ca
mov.w r3, -1
strd sb, r4, [sp]
movs r2, 1
mov r1, r6
mov r5, r0
str r4, [sp, 8]
blx 0x2144
ldr r1, [0x000049e4]
mov r4, r0
mov r2, r5
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x000049e8]
add r3, pc
--
blx sb
mov r1, r6
mov r0, r5
blx 0x22c0
ldr r2, sym.imp.send
ldr r3, [0x000049e0]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x49d6
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, lr}
add sp, 8
bx lr
ldr r1, [0x000049f0]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x49ac
blx 0x21a0
--
mov r1, r5
mov r0, r4
blx 0x22c0
ldr r2, sym.imp.fork
ldr r3, [0x00004aa4]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4a8a
add sp, 0x10
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
add sp, 8
bx lr
blx 0x21a0
ldr r1, [0x00004aac]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4a6c
nop
--
movs r2, 1
strd sb, r4, [sp]
str r4, [sp, 8]
blx 0x2144
adds r6, r0, 1
mov r0, r6
blx 0x2264
cbz r0, 0x4b52
mov.w r3, -1
strd sb, r4, [sp]
movs r2, 1
mov r1, r6
mov r5, r0
str r4, [sp, 8]
blx 0x2144
ldr r1, [0x00004b6c]
mov r4, r0
mov r2, r5
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x00004b70]
add r3, pc
--
blx sb
mov r1, r6
mov r0, r5
blx 0x22c0
ldr r2, [0x00004b74]
ldr r3, [0x00004b68]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4b5e
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, lr}
add sp, 8
bx lr
ldr r1, [0x00004b78]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4b34
blx 0x21a0
--
movs r2, 1
strd sb, r4, [sp]
str r4, [sp, 8]
blx 0x2144
adds r6, r0, 1
mov r0, r6
blx 0x2264
cbz r0, 0x4c18
mov r1, r6
mov.w r3, -1
movs r2, 1
strd r4, r4, [sp, 4]
str.w sb, [sp]
mov r5, r0
blx 0x2144
ldr r1, [0x00004c38]
mov r2, r5
mov r4, r0
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x00004c3c]
add r3, pc
--
blx 0x2120
ldr r2, [0x00004c40]
ldr r3, [0x00004c34]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4c2a
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, lr}
add sp, 8
bx lr
ldr r2, [0x00004c44]
movs r0, 5
ldr r1, [0x00004c48]
add r2, pc
add r1, pc
adds r2, 0x14
blx sym.imp.__vfprintf_chk
b 0x4bfa
blx 0x21a0
--
ldr r2, [r3]
ldr r3, [sp, 0x1c]
eors r2, r3
mov.w r3, 0
bne 0x4d1a
add sp, 0x24
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
cbz r7, 0x4d0c
ldrb r2, [r7, 5]
movs r0, 2
ldrb r3, [r7, 4]
ldr r1, [0x00004d3c]
strd r2, r6, [sp, 0xc]
str r3, [sp, 8]
ldrb r2, [r7, 3]
add r1, pc
ldrb r3, [r7, 2]
strd r3, r2, [sp]
ldrb r3, [r7, 1]
ldrb r2, [r7]
blx sym.imp.__vfprintf_chk
b 0x4cc6
ldr r1, [0x00004d40]
mov r2, r6
movs r0, 2
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4cc6
blx 0x21a0
ldr r1, [0x00004d44]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4cce
nop
[*] Function fprintf used 13 times libwpa_client.so
