[*] Binary protection state of snmpd

  
  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols


[*] Function system tear down of snmpd

    ; assembly                                                   | /* r2dec pseudo code output */
                                                                 | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/snmpd @ 0x268f4 */
                                                                 | #include <stdint.h>
                                                                 |  
    ; (fcn) sym.ax_mib_deregister_compliance_statement ()        | void ax_mib_deregister_compliance_statement () {
    0x000268f4 lui gp, 3                                         |     
    0x000268f8 addiu gp, gp, -0x5364                             |     
    0x000268fc addu gp, gp, t9                                   |     gp += t9;
    0x00026900 lw t9, -0x7d34(gp)                                |     t9 = sym.snmp_mib2_system_rm_sysORentry
    0x00026904 b 0x178b8                                         |     void (*0x178b8)() ();
    0x00026908 nop                                               |     
                                                                 | }
    ; assembly                                           | /* r2dec pseudo code output */
                                                         | /* /logs/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr/sbin/snmpd @ 0x165d4 */
                                                         | #include <stdint.h>
                                                         |  
    ; (fcn) sym.snmp_deregister_vid_chnl_table ()        | void snmp_deregister_vid_chnl_table () {
    0x000165d4 lui gp, 4                                 |     
    0x000165d8 addiu gp, gp, -0x5044                     |     
    0x000165dc addu gp, gp, t9                           |     gp += t9;
    0x000165e0 addiu sp, sp, -0x30                       |     
    0x000165e4 sw s3, 0x28(sp)                           |     *(var_28h) = s3;
    0x000165e8 sw s0, 0x1c(sp)                           |     *(var_1ch) = s0;
    0x000165ec lw s3, -0x7f74(gp)                        |     s3 = *(gp);
    0x000165f0 lw s0, -0x7fd8(gp)                        |     s0 = *((gp - 8182));
    0x000165f4 sw s2, 0x24(sp)                           |     *(var_24h) = s2;
    0x000165f8 sw s1, 0x20(sp)                           |     *(var_20h) = s1;
    0x000165fc sw gp, 0x10(sp)                           |     *(var_10h) = gp;
    0x00016600 sw ra, 0x2c(sp)                           |     *(var_2ch) = ra;
    0x00016604 addiu s0, s0, -0x6e10                     |     s0 += -0x6e10;
    0x00016608 move s1, zero                             |     s1 = 0;
                                                         |     /* fcn.00015e60 */
    0x0001660c addiu s3, s3, 0x5e60                      |     s3 += 0x5e60;
    0x00016610 addiu s2, zero, 8                         |     s2 = 8;
                                                         |     do {
    0x00016614 lw v0, (s0)                               |         v0 = *(s0);
    0x00016618 lw t9, -0x7d38(gp)                        |         t9 = sym.deregister_mib_handler;
    0x0001661c move a0, v0                               |         a0 = v0;
                                                         |         if (v0 != 0) {
    0x00016620 beqz v0, 0x16664                          |             
    0x00016624 bal 0x1e294                               |             sym_deregister_mib_handler ();
    0x00016628 nop                                       |             
    0x0001662c move t9, s3                               |             t9 = s3;
    0x00016630 move a0, s1                               |             a0 = s1;
    0x00016634 bal 0x15e60                               |             fcn_00015e60 ();
    0x00016638 lw gp, 0x10(sp)                           |             gp = *(var_10h);
    0x0001663c lw v0, 0x10(s0)                           |             v0 = *((s0 + 4));
    0x00016640 move a0, v0                               |             a0 = v0;
    0x00016644 lw t9, -0x7940(gp)                        |             t9 = sym.imp.free;
                                                         |             if (v0 == 0) {
    0x00016648 beqz v0, 0x16664                          |                 goto label_0;
                                                         |             }
    0x0001664c jalr t9                                   |             t9 ();
    0x00016650 nop                                       |             
    0x00016654 lw gp, 0x10(sp)                           |             gp = *(var_10h);
    0x00016658 sw zero, 0x10(s0)                         |             *((s0 + 4)) = 0;
    0x0001665c sw zero, 0x14(s0)                         |             *((s0 + 5)) = 0;
    0x00016660 sb zero, 0x18(s0)                         |             *((s0 + 24)) = 0;
                                                         |         }
                                                         | label_0:
    0x00016664 addiu s1, s1, 1                           |         s1++;
    0x00016668 addiu s0, s0, 0x24                        |         s0 += 0x24;
    0x0001666c bne s1, s2, 0x16614                       |         
                                                         |     } while (s1 != s2);
    0x00016670 lw a0, -0x7fdc(gp)                        |     a0 = *(gp);
    0x00016674 lw t9, -0x7d34(gp)                        |     t9 = sym.snmp_mib2_system_rm_sysORentry
    0x00016678 addiu a0, a0, 0x315c                      |     a0 += 0x315c;
    0x0001667c bal 0x178b8                               |     sym_snmp_mib2_system_rm_sysORentry ()
    0x00016680 lw gp, 0x10(sp)                           |     gp = *(var_10h);
    0x00016684 lw ra, 0x2c(sp)                           |     ra = *(var_2ch);
    0x00016688 lw s3, 0x28(sp)                           |     s3 = *(var_28h);
    0x0001668c lw s2, 0x24(sp)                           |     s2 = *(var_24h);
    0x00016690 lw s1, 0x20(sp)                           |     s1 = *(var_20h);
    0x00016694 lw s0, 0x1c(sp)                           |     s0 = *(var_1ch);
    0x00016698 lw t9, -0x7978(gp)                        |     t9 = sym.imp.axq_exit;
    0x0001669c addiu sp, sp, 0x30                        |     
    0x000166a0 jr t9                                     |     return t9 ();
                                                         | }

[*] Function system used 4 times snmpd