[*] Binary protection state of request-key

  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols

[*] Function printf tear down of request-key

    ; assembly                           | /* r2dec pseudo code output */

                                         | /* /logs/firmware/patool_extraction/rootfs.img_unblob_extracted/rootfs.img_extract/0-50593792.squashfs_v4_le_extract/usr/sbin/request-key @ 0x14b4 */

                                         | #include <stdint.h>

                                         |  

    ; (fcn) fcn.000014b4 ()              | void fcn_000014b4 () {

                                         |     int16_t var_0h;

                                         |     int16_t var_4h;

                                         |     int16_t var_10h;

                                         |     int16_t var_14h;

    0x000014b4 push {r0, r1, r2, r3}     |     

    0x000014b6 ldr r3, [pc, 0x60]        |     

    0x000014b8 ldr r0, [pc, 0x60]        |     

    0x000014ba ldr r2, [pc, 0x64]        |     r2 = *(0x1522);

    0x000014bc add r3, pc                |     

    0x000014be ldr r3, [r3]              |     r3 = *(0x29da);

    0x000014c0 add r0, pc                |     r0 = "-- exec disabled --";

    0x000014c2 push {lr}                 |     

    0x000014c4 ldr r1, [pc, 0x5c]        |     

    0x000014c6 sub sp, 0xc               |     

    0x000014c8 ldr r2, [r0, r2]          |     

    0x000014ca add r1, pc                |     r1 = 0x29f2;

    0x000014cc ldr r4, [sp, 0x10]        |     r4 = var_10h;

    0x000014ce ldr r2, [r2]              |     r2 = "-- exec disabled --";

    0x000014d0 str r2, [sp, 4]           |     var_4h = r2;

    0x000014d2 mov.w r2, 0               |     r2 = 0;

    0x000014d6 cbnz r3, 0x14e6           |     

                                         |     while (1) {

    0x000014d8 ldr r3, [pc, 0x4c]        |         

    0x000014da add r3, pc                |         r3 = 0x2a06;

    0x000014dc ldr r1, [r3, 4]           |         r1 = *(0x2a0a);

                                         |         if (r1 == 0) {

    0x000014de cbz r1, 0x14fa            |             goto label_1;

                                         |         }

                                         | label_0:

    0x000014e0 movs r0, 1                |         r0 = 1;

    0x000014e2 blx 0xe64                 |         exit (r0);

    0x000014e6 ldr r0, [pc, 0x44]        |         r0 = *(0x152e);

    0x000014e8 add r3, sp, 0x14          |         r3 += var_14h;

    0x000014ea str r3, [sp]              |         *(sp) = r3;

    0x000014ec mov r2, r4                |         r2 = r4;

    0x000014ee ldr r1, [r1, r0]          |         r1 = *((r1 + r0));

    0x000014f0 ldr r0, [r1]              |         r0 = *(r1);

    0x000014f2 movs r1, 1                |         r1 = 1;

    0x000014f4 blx 0xe1c                 |         vfprintf_chk ()

    0x000014f8 b 0x14d8                  |         

                                         |     }

                                         | label_1:

    0x000014fa ldr r0, [pc, 0x34]        |     

    0x000014fc movs r2, 0x50             |     r2 = 0x50;

    0x000014fe add r0, pc                |     r0 = 0x2a34;

    0x00001500 blx 0xf6c                 |     openlog ();

    0x00001504 add r3, sp, 0x14          |     r3 += var_14h;

    0x00001506 mov r2, r4                |     r2 = r4;

    0x00001508 movs r1, 1                |     r1 = 1;

    0x0000150a movs r0, 3                |     r0 = 3;

    0x0000150c str r3, [sp]              |     *(sp) = r3;

    0x0000150e blx 0xdec                 |     vsyslog_chk ();

    0x00001512 blx 0xe28                 |     closelog ();

    0x00001516 b 0x14e0                  |     goto label_0;

                                         | }

[*] Function printf used 2 times request-key