[*] Binary protection state of libwpa_client.so
Full RELRO Canary found NX enabled DSO No RPATH No RUNPATH No Symbols
[*] Function printf tear down of libwpa_client.so
ldr r2, [0x00002958]
ldr r3, [0x00002954]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xa4]
eors r2, r3
mov.w r3, 0
bne 0x2940
mov r0, r6
add sp, 0xac
vpop {d8}
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
vldr d8, [0x0000294c]
add.w fp, sp, 0x18
add.w r8, sp, 0x24
movs r2, 0x80
movs r1, 0
mov r0, r8
vstr d8, [sp, 0x18]
blx sym.imp.__printf_chk
ldr r0, [r4]
movs r7, 1
--
itt ge
strge r0, [r4]
movge r0, 0
pop {r4, pc}
push {r4, r5, r6, lr}
sub sp, 0x98
ldr r6, [0x00002b28]
add r5, sp, 0x14
mov r4, r0
movs r2, 0x80
vmov.i32 d16, 0
movs r1, 0
ldr r3, [0x00002b2c]
add r6, pc
mov r0, r5
vstr d16, [sp, 8]
ldr r3, [r6, r3]
ldr r3, [r3]
str r3, [sp, 0x94]
mov.w r3, 0
blx sym.imp.__printf_chk
ldr r0, [r4]
blx 0x21d4
--
ldrb r3, [r0]
cbnz r3, 0x3a80
b 0x3a8c
ldrb r3, [r0, 1]!
cbz r3, 0x3a8c
cmp r3, 0xd
it ne
cmpne r3, 0xa
bne 0x3a7a
movs r0, 1
bx lr
mov r0, r3
bx lr
push.w {r4, r5, r6, r7, r8, lr}
mov r7, r2
mov r5, r1
mov r2, r1
movs r1, 0
mov r6, r0
mov r4, r3
blx sym.imp.__printf_chk
cbz r7, 0x3ae6
cmp r5, r4
--
blx 0x2508
cmp r0, 0x81
it hi
strbhi r5, [sp, 0x10]
b 0x47d4
add.w sl, sp, 0x10
ldr r3, [sp, 0xc]
movs r2, 1
mov r1, r6
str.w sb, [sp]
mov r0, r4
str r3, [sp, 4]
mov.w r3, -1
blx 0x2144
ldr r1, [0x0000485c]
mov r3, r4
mov r2, sl
mov r5, r0
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x00004860]
add r3, pc
--
blx sb
mov r1, r6
mov r0, r4
blx 0x22c0
ldr r2, [0x00004864]
ldr r3, [0x00004850]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0x94]
eors r2, r3
mov.w r3, 0
bne 0x4846
add sp, 0x98
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
add sp, 8
bx lr
ldr r1, [0x00004868]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x481c
blx 0x21a0
--
mov r1, r5
mov r0, r4
blx 0x22c0
ldr r2, [0x00004920]
ldr r3, [0x0000491c]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4902
add sp, 0x10
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
add sp, 8
bx lr
blx 0x21a0
ldr r1, [0x00004924]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x48e4
nop
--
movs r2, 1
strd sb, r4, [sp]
str r4, [sp, 8]
blx 0x2144
adds r6, r0, 1
mov r0, r6
blx 0x2264
cbz r0, 0x49ca
mov.w r3, -1
strd sb, r4, [sp]
movs r2, 1
mov r1, r6
mov r5, r0
str r4, [sp, 8]
blx 0x2144
ldr r1, [0x000049e4]
mov r4, r0
mov r2, r5
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x000049e8]
add r3, pc
--
blx sb
mov r1, r6
mov r0, r5
blx 0x22c0
ldr r2, sym.imp.send
ldr r3, [0x000049e0]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x49d6
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, lr}
add sp, 8
bx lr
ldr r1, [0x000049f0]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x49ac
blx 0x21a0
--
mov r1, r5
mov r0, r4
blx 0x22c0
ldr r2, sym.imp.fork
ldr r3, [0x00004aa4]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4a8a
add sp, 0x10
pop.w {r4, r5, r6, r7, r8, sb, sl, lr}
add sp, 8
bx lr
blx 0x21a0
ldr r1, [0x00004aac]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4a6c
nop
--
movs r2, 1
strd sb, r4, [sp]
str r4, [sp, 8]
blx 0x2144
adds r6, r0, 1
mov r0, r6
blx 0x2264
cbz r0, 0x4b52
mov.w r3, -1
strd sb, r4, [sp]
movs r2, 1
mov r1, r6
mov r5, r0
str r4, [sp, 8]
blx 0x2144
ldr r1, [0x00004b6c]
mov r4, r0
mov r2, r5
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x00004b70]
add r3, pc
--
blx sb
mov r1, r6
mov r0, r5
blx 0x22c0
ldr r2, [0x00004b74]
ldr r3, [0x00004b68]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4b5e
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, lr}
add sp, 8
bx lr
ldr r1, [0x00004b78]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4b34
blx 0x21a0
--
movs r2, 1
strd sb, r4, [sp]
str r4, [sp, 8]
blx 0x2144
adds r6, r0, 1
mov r0, r6
blx 0x2264
cbz r0, 0x4c18
mov r1, r6
mov.w r3, -1
movs r2, 1
strd r4, r4, [sp, 4]
str.w sb, [sp]
mov r5, r0
blx 0x2144
ldr r1, [0x00004c38]
mov r2, r5
mov r4, r0
mov r0, r7
add r1, pc
blx sym.imp.__vfprintf_chk
ldr r3, [0x00004c3c]
add r3, pc
--
blx 0x2120
ldr r2, [0x00004c40]
ldr r3, [0x00004c34]
add r2, pc
ldr r3, [r2, r3]
ldr r2, [r3]
ldr r3, [sp, 0xc]
eors r2, r3
mov.w r3, 0
bne 0x4c2a
add sp, 0x14
pop.w {r4, r5, r6, r7, r8, sb, lr}
add sp, 8
bx lr
ldr r2, [0x00004c44]
movs r0, 5
ldr r1, [0x00004c48]
add r2, pc
add r1, pc
adds r2, 0x14
blx sym.imp.__vfprintf_chk
b 0x4bfa
blx 0x21a0
--
ldr r2, [r3]
ldr r3, [sp, 0x1c]
eors r2, r3
mov.w r3, 0
bne 0x4d1a
add sp, 0x24
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
cbz r7, 0x4d0c
ldrb r2, [r7, 5]
movs r0, 2
ldrb r3, [r7, 4]
ldr r1, [0x00004d3c]
strd r2, r6, [sp, 0xc]
str r3, [sp, 8]
ldrb r2, [r7, 3]
add r1, pc
ldrb r3, [r7, 2]
strd r3, r2, [sp]
ldrb r3, [r7, 1]
ldrb r2, [r7]
blx sym.imp.__vfprintf_chk
b 0x4cc6
ldr r1, [0x00004d40]
mov r2, r6
movs r0, 2
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4cc6
blx 0x21a0
ldr r1, [0x00004d44]
movs r0, 5
add r1, pc
blx sym.imp.__vfprintf_chk
b 0x4cce
nop
[*] Function printf used 16 times libwpa_client.so
