[*] Binary protection state of ntpconfd

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function system tear down of ntpconfd

    ; assembly                           | /* r2dec pseudo code output */
                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/ntpconfd @ 0x9620 */
                                         | #include <stdint.h>
                                         |  
    ; (fcn) fcn.00009620 ()              | void fcn_00009620 () {
                                         | label_2:
    0x00009620 lui gp, 2                 |     
    0x00009624 addiu gp, gp, 0x1a30      |     
    0x00009628 addu gp, gp, t9           |     gp += t9;
    0x0000962c addiu sp, sp, -0x38       |     
    0x00009630 lw t9, -0x7fdc(gp)        |     t9 = *(gp);
    0x00009634 sw s0, 0x2c(sp)           |     *(var_2ch) = s0;
    0x00009638 lw s0, -0x7da8(gp)        |     s0 = *((gp - 8042));
    0x0000963c sw gp, 0x18(sp)           |     *(var_18h) = gp;
    0x00009640 sw ra, 0x34(sp)           |     *(var_34h) = ra;
    0x00009644 lw v0, (s0)               |     v0 = *(s0);
    0x00009648 sw s1, 0x30(sp)           |     *(var_30h) = s1;
    0x0000964c sw v0, 0x24(sp)           |     *(var_24h) = v0;
    0x00009650 lw v0, -0x7fd8(gp)        |     v0 = *((gp - 8182));
    0x00009654 sw zero, 0x20(sp)         |     *(var_20h) = 0;
    0x00009658 addiu t9, t9, -0x7690     |     t9 += -0x7690;
    0x0000965c sw zero, 0x3438(v0)       |     *((v0 + 3342)) = 0;
    0x00009660 bal 0x8970                |     fcn_00008970 ();
    0x00009664 nop                       |     
    0x00009668 lw gp, 0x18(sp)           |     gp = *(var_18h);
                                         |     if (v0 != 0) {
    0x0000966c bnez v0, 0x9710           |         goto label_3;
                                         |     }
    0x00009670 lw s1, -0x7fd8(gp)        |     s1 = *((gp - 8182));
    0x00009674 lw a0, 0x343c(s1)         |     a0 = *((s1 + 3343));
    0x00009678 lw t9, -0x7dec(gp)        |     t9 = sym.imp.g_source_remove;
    0x0000967c bnez a0, 0x96fc           |     
                                         |     while (1) {
    0x00009680 lw a0, -0x7fdc(gp)        |         a0 = *(gp);
    0x00009684 lw t9, -0x7d80(gp)        |         t9 = sym.imp.policykit_system_stop_service
    0x00009688 addiu a1, sp, 0x20        |         a1 = sp + 0x20;
                                         |         /* esilref: 'ntp' */
    0x0000968c addiu a0, a0, 0x2374      |         a0 += 0x2374;
    0x00009690 jalr t9                   |         t9 ();
    0x00009694 lw gp, 0x18(sp)           |         gp = *(var_18h);
                                         | label_0:
    0x00009698 lw v0, 0x20(sp)           |         v0 = *(var_20h);
                                         | label_1:
    0x0000969c lw a3, -0x7fdc(gp)        |         a3 = *(gp);
                                         |         if (v0 != 0) {
    0x000096a0 beqz v0, 0x96dc           |             
    0x000096a4 lw v0, 8(v0)              |             v0 = *((v0 + 2));
    0x000096a8 lw a2, -0x7fdc(gp)        |             a2 = *(gp);
    0x000096ac lw t9, -0x7e6c(gp)        |             t9 = sym.imp.g_log;
    0x000096b0 addiu a3, a3, 0x2320      |             a3 += 0x2320;
                                         |             /* str._sFailed_to_restart_NTP_service:__s */
    0x000096b4 addiu a2, a2, 0x239c      |             a2 += 0x239c;
    0x000096b8 addiu a1, zero, 0x100     |             a1 = 0x100;
    0x000096bc move a0, zero             |             a0 = 0;
    0x000096c0 sw v0, 0x10(sp)           |             *(var_10h_2) = v0;
    0x000096c4 jalr t9                   |             t9 ();
    0x000096c8 lw gp, 0x18(sp)           |             gp = *(var_18h);
    0x000096cc lw t9, -0x7e44(gp)        |             t9 = sym.imp.g_error_free;
    0x000096d0 lw a0, 0x20(sp)           |             a0 = *(var_20h);
    0x000096d4 jalr t9                   |             t9 ();
    0x000096d8 lw gp, 0x18(sp)           |             gp = *(var_18h);
                                         |         }
    0x000096dc lw v1, 0x24(sp)           |         v1 = *(var_24h);
    0x000096e0 lw v0, (s0)               |         v0 = *(s0);
    0x000096e4 lw ra, 0x34(sp)           |         ra = *(var_34h);
                                         |         if (v1 != v0) {
    0x000096e8 bne v1, v0, 0x9784        |             goto label_4;
                                         |         }
    0x000096ec lw s1, 0x30(sp)           |         s1 = *(var_30h);
    0x000096f0 lw s0, 0x2c(sp)           |         s0 = *(var_2ch);
    0x000096f4 addiu sp, sp, 0x38        |         
    0x000096f8 jr ra                     |         return v0;
    0x000096fc jalr t9                   |         t9 ();
    0x00009700 nop                       |         
    0x00009704 lw gp, 0x18(sp)           |         gp = *(var_18h);
    0x00009708 sw zero, 0x343c(s1)       |         *((s1 + 3343)) = 0;
    0x0000970c b 0x9680                  |         
                                         |     }
                                         | label_3:
    0x00009710 lw t9, -0x7fdc(gp)        |     t9 = *(gp);
    0x00009714 addiu t9, t9, -0x73f8     |     t9 += -0x73f8;
    0x00009718 bal 0x8c08                |     fcn_00008c08 ();
    0x0000971c nop                       |     
    0x00009720 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00009724 lw t9, -0x7fdc(gp)        |     t9 = *(gp);
    0x00009728 addiu t9, t9, -0x6d00     |     t9 += -0x6d00;
    0x0000972c bal 0x9300                |     fcn_00009300 ();
    0x00009730 nop                       |     
    0x00009734 lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00009738 addiu a1, sp, 0x20        |     a1 = sp + 0x20;
    0x0000973c lw a0, -0x7fdc(gp)        |     a0 = *(gp);
    0x00009740 lw t9, -0x7e08(gp)        |     t9 = sym.imp.policykit_system_restart_service
                                         |     /* esilref: 'ntp' */
    0x00009744 addiu a0, a0, 0x2374      |     a0 += 0x2374;
    0x00009748 jalr t9                   |     t9 ();
    0x0000974c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00009750 lw v0, -0x7fd8(gp)        |     v0 = *((gp - 8182));
    0x00009754 lw v0, 0x3444(v0)         |     v0 = *((v0 + 3345));
    0x00009758 lw v0, -0x7fd8(gp)        |     v0 = *((gp - 8182));
                                         |     if (v0 == 0) {
    0x0000975c beqz v0, 0x9698           |         goto label_0;
                                         |     }
    0x00009760 lw v0, 0x343c(v0)         |     v0 = *((v0 + 3343));
    0x00009764 lw v0, 0x20(sp)           |     v0 = *(var_20h);
                                         |     if (v0 != 0) {
    0x00009768 bnez v0, 0x969c           |         goto label_1;
                                         |     }
    0x0000976c lw t9, -0x7fdc(gp)        |     t9 = *(gp);
    0x00009770 addiu t9, t9, -0x6a30     |     t9 += -0x6a30;
    0x00009774 bal 0x95d0                |     fcn_000095d0 ();
    0x00009778 nop                       |     
    0x0000977c lw gp, 0x18(sp)           |     gp = *(var_18h);
    0x00009780 b 0x9698                  |     goto label_0;
                                         | label_4:
    0x00009784 lw t9, -0x7df8(gp)        |     t9 = sym.imp.__stack_chk_fail;
    0x00009788 jalr t9                   |     t9 ();
    0x0000978c nop                       |     
    0x00009790 lui gp, 2                 |     
    0x00009794 addiu gp, gp, 0x18c0      |     
    0x00009798 addu gp, gp, t9           |     gp += t9;
    0x0000979c addiu sp, sp, -0x30       |     
    0x000097a0 lw t9, -0x7ec8(gp)        |     t9 = sym.storage_manager_get_drift_value;
    0x000097a4 sw gp, 0x18(sp)           |     *(var_18h_2) = gp;
    0x000097a8 sw ra, 0x2c(sp)           |     *(var_2ch_2) = ra;
    0x000097ac sw s1, 0x28(sp)           |     *(var_28h) = s1;
    0x000097b0 sw s0, 0x24(sp)           |     *(var_24h_2) = s0;
    0x000097b4 bal 0xd608                |     sym_storage_manager_get_drift_value ();
    0x000097b8 nop                       |     
    0x000097bc lw gp, 0x18(sp)           |     gp = *(var_18h_2);
    0x000097c0 move s0, v0               |     s0 = v0;
    0x000097c4 move a0, s0               |     a0 = s0;
    0x000097c8 lw v0, -0x7fdc(gp)        |     v0 = *(gp);
    0x000097cc lw t9, -0x7ec4(gp)        |     t9 = *(gp);
    0x000097d0 move a1, v1               |     a1 = v1;
    0x000097d4 lw a2, 0x2720(v0)         |     a2 = *((v0 + 2504));
    0x000097d8 lw a3, 0x2724(v0)         |     a3 = *((v0 + 2505));
    0x000097dc move s1, v1               |     s1 = v1;
    0x000097e0 bal 0xd9e0                |     fcn_0000d9e0 ();
    0x000097e4 lw gp, 0x18(sp)           |     gp = *(var_18h_2);
                                         |     if (v0 <= 0) {
    0x000097e8 bgtz v0, 0x9810           |         
    0x000097ec lw v0, -0x7fdc(gp)        |         v0 = *(gp);
    0x000097f0 lw t9, -0x7ec0(gp)        |         t9 = *(gp);
    0x000097f4 move a0, s0               |         a0 = s0;
    0x000097f8 lw a2, 0x2728(v0)         |         a2 = *((v0 + 2506));
    0x000097fc lw a3, 0x272c(v0)         |         a3 = *((v0 + 2507));
    0x00009800 move a1, s1               |         a1 = s1;
    0x00009804 bal 0xdb30                |         fcn_0000db30 ();
    0x00009808 lw gp, 0x18(sp)           |         gp = *(var_18h_2);
                                         |         if (v0 >= 0) {
    0x0000980c bgez v0, 0x985c           |             goto label_5;
                                         |         }
                                         |     }
    0x00009810 lw a3, -0x7fdc(gp)        |     a3 = *(gp);
    0x00009814 lw a2, -0x7fdc(gp)        |     a2 = *(gp);
    0x00009818 lw t9, -0x7e6c(gp)        |     t9 = sym.imp.g_log;
    0x0000981c addiu a3, a3, 0x2320      |     a3 += 0x2320;
                                         |     /* str._sNTP_drift_file_is__f__deleting_and_restarting_NTP */
    0x00009820 addiu a2, a2, 0x23c0      |     a2 += 0x23c0;
    0x00009824 addiu a1, zero, 0x10      |     a1 = 0x10;
    0x00009828 move a0, zero             |     a0 = 0;
    0x0000982c sw s0, 0x10(sp)           |     *(var_10h) = s0;
    0x00009830 sw s1, 0x14(sp)           |     *(var_14h) = s1;
    0x00009834 jalr t9                   |     t9 ();
    0x00009838 lw gp, 0x18(sp)           |     gp = *(var_18h_2);
    0x0000983c lw t9, -0x7ebc(gp)        |     t9 = sym.storage_manager_delete_drift_file;
    0x00009840 bal 0xd7bc                |     sym_storage_manager_delete_drift_file ();
    0x00009844 nop                       |     
    0x00009848 lw gp, 0x18(sp)           |     gp = *(var_18h_2);
    0x0000984c lw t9, -0x7fdc(gp)        |     t9 = *(gp);
    0x00009850 addiu t9, t9, -0x69e0     |     t9 += -0x69e0;
    0x00009854 bal 0x9620                |     fcn_00009620 ();
                                         |     goto label_2;
    0x00009858 nop                       |     
                                         | label_5:
    0x0000985c lw ra, 0x2c(sp)           |     ra = *(var_2ch_2);
    0x00009860 lw s1, 0x28(sp)           |     s1 = *(var_28h);
    0x00009864 lw s0, 0x24(sp)           |     s0 = *(var_24h_2);
    0x00009868 addiu v0, zero, 1         |     v0 = 1;
    0x0000986c addiu sp, sp, 0x30        |     
    0x00009870 jr ra                     |     return v0;
                                         | }

[*] Function system used 3 times ntpconfd