[*] Binary protection state of wpa_supplicant
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of wpa_supplicant
mov.w fp, 0
mov.w lr, 0
pop {r1}
mov r2, sp
push {r2}
push {r0}
ldr.w sl, [0x00007890]
adr r3, 0x14
add sl, r3
mov.w r3, 0
push {r3}
ldr r0, [0x00007894]
ldr.w r0, [sl, r0]
blx sym.imp.snprintf
blx 0x6878
strh r4, [r2, 4]
--
bl 0x35114
cbz r0, 0x3df16
ldr r5, [0x0003e00c]
movs r2, 5
mov r3, r2
movs r6, 0
str r2, [sp, 0x10]
add r5, pc
ldr r0, [0x0003e010]
mov r2, r5
mov r1, r7
add r0, pc
bl 0x3dc70
ldr r2, [sp, 0xc]
movs r3, 0
mov r1, r5
mov r0, r7
str.w sb, [sp]
str r2, [sp, 4]
ldr r2, [sp, 0x10]
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3df70
--
beq 0x3e13a
movs r2, 0x6c
mov r1, r5
mov r0, r7
bl 0x14934
ldr r0, [r4, 4]
movs r2, 0x6e
mov r1, r8
blx 0x6ac4
cmp r0, 0
blt 0x3e19a
ldr r1, [0x0003e324]
mov r2, r5
movs r0, 2
add r1, pc
bl 0xe3e0
ldr r7, [r6, 0x20]
cmp r7, 0
beq.w 0x3e1f2
mov r0, r7
blx sym.imp.__printf_chk
cmp r0, 0
beq.w 0x3e21a
--
add r1, pc
blx 0x63c8
mov r8, r0
cmp r0, 0
bne 0x3e448
ldr r1, [0x0003e758]
add.w sl, r7, 4
mov r0, sl
add r1, pc
blx sym.imp.SSL_read
mov r4, r0
cmp r0, 0
beq.w 0x3e59e
mov.w r1, 0x1f8
mov r0, sl
strb r8, [r4], 7
blx sym.imp.EVP_des_ede3_cbc
cmp r0, 0
blt.w 0x3e5b2
mov r0, r4
blx sym.imp.__printf_chk
cmp r0, 0
beq.w 0x3e5f0
--
mov fp, r0
mov r1, r6
mov r0, r4
blx 0x66fc
ldr r3, [sp, 0x10]
cmp.w fp, 0
beq.w 0x3e9b0
mov r5, fp
ldr r0, [0x0003ea6c]
mov r2, fp
mov r1, r7
add r0, pc
bl 0x3dc70
ldr r3, [sp, 0xc]
mov r1, fp
ldr r2, [sp, 0x10]
mov r0, r7
str.w sl, [sp]
str r3, [sp, 4]
movs r3, 0
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3e96c
--
mov.w fp, 1
ldr r1, [r6]
cmp.w fp, 0
bne 0x3f30e
mov r2, r1
mov r3, fp
ldr r1, [sp, 8]
mov r0, sl
bl 0x35060
cmp r0, 0
beq 0x3f354
ldr r7, [sp, 8]
mov r3, fp
ldr r0, [r4, 4]
movs r2, 5
ldr r1, [0x0003f3b4]
str r7, [sp]
ldr r7, [r6]
add r1, pc
str r7, [sp, 4]
blx sym.imp.__fprintf_chk
cmp r0, 0
bge 0x3f270
--
bl 0xe3e0
b 0x3f270
ldrh.w r3, [sp, 0x98]
movw r2, 0x4843
cmp r3, r2
bne 0x3f2a2
ldrb.w r3, [sp, 0x9a]
mov fp, r3
cmp r3, 0
bne 0x3f2a2
ldr r1, [r6]
cmp.w fp, 0
beq 0x3f2ae
str r1, [sp, 4]
movs r3, 0
ldr r1, [sp, 8]
movs r2, 5
str r1, [sp]
ldr r1, [sp, 0xc]
ldr r0, [r4, 4]
blx sym.imp.__fprintf_chk
cmp r0, 0
bge 0x3f270
--
add r1, pc
bl 0xe3e0
b 0x3f270
blx 0x71a8
ldr r0, [r0]
blx 0x64f8
ldr r1, [0x0003f3c0]
mov r2, r0
movs r0, 5
add r1, pc
bl 0xe3e0
b 0x3f270
ldr r7, [sp, 8]
mov r3, fp
ldr r5, [r6]
movs r2, 3
ldr r1, [0x0003f3c4]
ldr r0, [r4, 4]
strd r7, r5, [sp]
add r1, pc
blx sym.imp.__fprintf_chk
cmp r0, 0
blt 0x3f388
--
ldr r0, [r4]
rev16 r2, r2
ldrh r4, [r4, 4]
strh.w r2, [sp, 0xa]
movs r2, 6
str r3, [sp, 0x10]
strb.w r2, [sp, 0x13]
movs r2, 0x14
str r2, [sp, 4]
str r3, [sp, 0x18]
strh.w r4, [sp, 0x18]
ldr.w r4, [ip, 0x18]
str r0, [sp, 0x14]
ldr r2, [sp, 0x28]
str r4, [sp, 0xc]
add r4, sp, 8
ldr.w r0, [ip]
str r4, [sp]
movs r4, 0x11
strh.w r4, [sp, 8]
blx sym.imp.__fprintf_chk
subs r4, r0, 0
blt 0x57320
[*] Function printf used 9 times wpa_supplicant
