[*] Binary protection state of mod_evasive.so

  	Partial RELRO  No Canary found   NX disabled  DSO          No RPATH     No RUNPATH   No Symbols

[*] Function popen tear down of mod_evasive.so

    ; assembly                       | /* r2dec pseudo code output */

                                     | /* /logs/firmware/unblob_extracted/firmware_extract/56048-12514271.gzip_extract/gzip.uncompressed_extract/5243916-15068666.gzip_extract/gzip.uncompressed_extract/usr/lib/lighttpd/mod_evasive.so @ 0x6b4 */

                                     | #include <stdint.h>

                                     |  

    ; (fcn) entry.fini0 ()           | void entry_fini0 () {

    0x000006b4 ldr r3, [pc, 0x68]    |     r3 = *(0x720);

    0x000006b8 push {r4, lr}         |     

    0x000006bc ldr r4, [pc, 0x64]    |     r4 = *(0x724);

    0x000006c0 add r3, pc, r3        |     r3 = pc + r3;

    0x000006c4 ldrb r3, [r3]         |     r3 = *(r3);

    0x000006c8 add r4, pc, r4        |     r4 = pc + r4;

    0x000006cc cmp r3, 0             |     

    0x000006d0 popne {r4, pc}        |     

    0x000006d4 ldr r3, [pc, 0x50]    |     r3 = *(0x728);

    0x000006d8 ldr r3, [r4, r3]      |     r3 = *(0x724);

    0x000006dc cmp r3, 0             |     

                                     |     if (r3 != 0) {

    0x000006e0 beq 0x6f0             |         

    0x000006e4 ldr r3, [pc, 0x44]    |         r3 = *(0x72c);

    0x000006e8 ldr r0, [pc, r3]      |         r0 = *(0x000006f0);

    0x000006ec bl 0x568              |         cxa_finalize ();

                                     |     }

    0x000006f0 bl 0x5f8              |     entry0 ();

    0x000006f4 ldr r3, [pc, 0x38]    |     r3 = *(0x730);

    0x000006f8 ldr r3, [r4, r3]      |     r3 = *((r4 + r3));

    0x000006fc cmp r3, 0             |     

                                     |     if (r3 != 0) {

    0x00000700 beq 0x710             |         

    0x00000704 ldr r0, [pc, 0x2c]    |         r0 = *(0x734);

    0x00000708 add r0, pc, r0        |         r0 = pc + r0;

    0x0000070c bl 0x58c              |         loc_imp_deregister_frame_info ();

                                     |     }

    0x00000710 ldr r3, [pc, 0x24]    |     r3 = *(0x738);

    0x00000714 mov r2, 1             |     r2 = 1;

    0x00000718 add r3, pc, r3        |     r3 = pc + r3;

    0x0000071c strb r2, [r3]         |     *(r3) = r2;

    0x00000720 pop {r4, pc}          |     

                                     | }

[*] Function popen used 1 times mod_evasive.so