[*] Binary protection state of request-key

  	Full RELRO     Canary found      NX enabled   PIE enabled  No RPATH     No RUNPATH   No Symbols

[*] Function fprintf tear down of request-key

    ; assembly                           | /* r2dec pseudo code output */

                                         | /* /logs/firmware/patool_extraction/rootfs.img_unblob_extracted/rootfs.img_extract/0-80367616.squashfs_v4_le_extract/usr/sbin/request-key @ 0x1580 */

                                         | #include <stdint.h>

                                         |  

    ; (fcn) fcn.00001580 ()              | void fcn_00001580 () {

                                         |     int16_t var_0h;

                                         |     int16_t var_4h;

                                         |     int16_t var_10h;

                                         |     int16_t var_14h;

    0x00001580 push {r0, r1, r2, r3}     |     

    0x00001582 ldr r3, [pc, 0x60]        |     

    0x00001584 ldr r0, [pc, 0x60]        |     

    0x00001586 ldr r2, [pc, 0x64]        |     r2 = *(0x15ee);

    0x00001588 add r3, pc                |     

    0x0000158a ldr r3, [r3]              |     r3 = *(0x2b72);

    0x0000158c add r0, pc                |     r0 = 0x2b78;

    0x0000158e push {lr}                 |     

    0x00001590 ldr r1, [pc, 0x5c]        |     

    0x00001592 sub sp, 0xc               |     

    0x00001594 ldr r2, [r0, r2]          |     

    0x00001596 add r1, pc                |     r1 = 0x2b8a;

    0x00001598 ldr r4, [sp, 0x10]        |     r4 = var_10h;

    0x0000159a ldr r2, [r2]              |     r2 = *(0x2b78);

    0x0000159c str r2, [sp, 4]           |     var_4h = r2;

    0x0000159e mov.w r2, 0               |     r2 = 0;

    0x000015a2 cbnz r3, 0x15b2           |     

                                         |     while (1) {

    0x000015a4 ldr r3, [pc, 0x4c]        |         

    0x000015a6 add r3, pc                |         r3 = 0x2b9e;

    0x000015a8 ldr r1, [r3, 4]           |         r1 = *(0x2ba2);

                                         |         if (r1 == 0) {

    0x000015aa cbz r1, 0x15c6            |             goto label_1;

                                         |         }

                                         | label_0:

    0x000015ac movs r0, 1                |         r0 = 1;

    0x000015ae blx 0xeec                 |         exit (r0);

    0x000015b2 ldr r0, [pc, 0x44]        |         r0 = *(0x15fa);

    0x000015b4 add r3, sp, 0x14          |         r3 += var_14h;

    0x000015b6 str r3, [sp]              |         *(sp) = r3;

    0x000015b8 mov r2, r4                |         r2 = r4;

    0x000015ba ldr r1, [r1, r0]          |         r1 = *((r1 + r0));

    0x000015bc ldr r0, [r1]              |         r0 = *(r1);

    0x000015be movs r1, 1                |         r1 = 1;

    0x000015c0 blx 0xea4                 |         vfprintf_chk ()

    0x000015c4 b 0x15a4                  |         

                                         |     }

                                         | label_1:

    0x000015c6 ldr r0, [pc, 0x34]        |     

    0x000015c8 movs r2, 0x50             |     r2 = 0x50;

    0x000015ca add r0, pc                |     r0 = 0x2bcc;

    0x000015cc blx 0xff4                 |     openlog ();

    0x000015d0 add r3, sp, 0x14          |     r3 += var_14h;

    0x000015d2 mov r2, r4                |     r2 = r4;

    0x000015d4 movs r1, 1                |     r1 = 1;

    0x000015d6 movs r0, 3                |     r0 = 3;

    0x000015d8 str r3, [sp]              |     *(sp) = r3;

    0x000015da blx 0xe74                 |     vsyslog_chk ();

    0x000015de blx 0xeb0                 |     closelog ();

    0x000015e2 b 0x15ac                  |     goto label_0;

                                         | }

[*] Function fprintf used 2 times request-key