[*] Binary protection state of nandwrite
Partial RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function printf tear down of nandwrite
10ce4: e3530003 cmp r3, #3
10ce8: 03a03001 moveq r3, #1
10cec: 05c53010 strbeq r3, [r5, #16]
10cf0: 0affffdc beq 10c68 <free@plt+0x94>
10cf4: e3530001 cmp r3, #1
10cf8: 1affffda bne 10c68 <free@plt+0x94>
10cfc: e28d1050 add r1, sp, #80 ; 0x50
10d00: e5970000 ldr r0, [r7]
10d04: eb000418 bl 11d6c <free@plt+0x1198>
10d08: e1c500f0 strd r0, [r5]
10d0c: eaffffd5 b 10c68 <free@plt+0x94>
10d10: e3500061 cmp r0, #97 ; 0x61
10d14: 0a000038 beq 10dfc <free@plt+0x228>
10d18: e3500062 cmp r0, #98 ; 0x62
10d1c: 0a000031 beq 10de8 <free@plt+0x214>
10d20: e3500056 cmp r0, #86 ; 0x56
10d24: 1affffcf bne 10c68 <free@plt+0x94>
10d28: e59f1e38 ldr r1, [pc, #3640] ; 11b68 <free@plt+0xf94>
10d2c: e59f2d90 ldr r2, [pc, #3472] ; 11ac4 <free@plt+0xef0>
10d30: e59f0d90 ldr r0, [pc, #3472] ; 11ac8 <free@plt+0xef4>
10d34: ebffff34 bl 10a0c <printf@plt>
10d38: e59f1e28 ldr r1, [pc, #3624] ; 11b68 <free@plt+0xf94>
10d3c: e59f0d88 ldr r0, [pc, #3464] ; 11acc <free@plt+0xef8>
10d40: ebffff31 bl 10a0c <printf@plt>
10d44: e1a0000b mov r0, fp
10d48: ebffff86 bl 10b68 <exit@plt>
--
14010: 00016724 andeq r6, r1, r4, lsr #14
14014: 0001676a andeq r6, r1, sl, ror #14
14018: c0304d18 eorsgt r4, r0, r8, lsl sp
1401c: 000167b0 ; <UNDEFINED> instruction: 0x000167b0
14020: 80c84d0a sbchi r4, r8, sl, lsl #26
14024: 000167b9 ; <UNDEFINED> instruction: 0x000167b9
14028: 000161e6 andeq r6, r1, r6, ror #3
1402c: 00015b34 andeq r5, r1, r4, lsr fp
14030: 000167da ldrdeq r6, [r1], -sl
14034: 000166ae andeq r6, r1, lr, lsr #13
14038: 000167fb strdeq r6, [r1], -fp
1403c: e92d4ff0 push {r4, r5, r6, r7, r8, r9, sl, fp, lr}
14040: e24dd024 sub sp, sp, #36 ; 0x24
14044: e58d0018 str r0, [sp, #24]
14048: e1a06001 mov r6, r1
1404c: e1a09002 mov r9, r2
14050: e59f11c0 ldr r1, [pc, #448] ; 14218 <free@plt+0x3644>
14054: e1a02003 mov r2, r3
14058: e59f01bc ldr r0, [pc, #444] ; 1421c <free@plt+0x3648>
1405c: e1a08003 mov r8, r3
14060: ebfff269 bl 10a0c <printf@plt>
14064: e59640e4 ldr r4, [r6, #228] ; 0xe4
14068: e1a00004 mov r0, r4
--
1414c: e58d5000 str r5, [sp]
14150: e58d3004 str r3, [sp, #4]
14154: e1a02008 mov r2, r8
14158: e1a03007 mov r3, r7
1415c: e1a01009 mov r1, r9
14160: e1a00006 mov r0, r6
14164: ebfffe39 bl 13a50 <free@plt+0x2e7c>
14168: e2507000 subs r7, r0, #0
1416c: 1a00000b bne 141a0 <free@plt+0x35cc>
14170: e59610e4 ldr r1, [r6, #228] ; 0xe4
14174: e1a03005 mov r3, r5
14178: e0432005 sub r2, r3, r5
1417c: e1510002 cmp r1, r2
14180: ca000019 bgt 141ec <free@plt+0x3618>
14184: e2844001 add r4, r4, #1
14188: e3540003 cmp r4, #3
1418c: 1affffc0 bne 14094 <free@plt+0x34c0>
14190: e1a02008 mov r2, r8
14194: e59f107c ldr r1, [pc, #124] ; 14218 <free@plt+0x3644>
14198: e59f0084 ldr r0, [pc, #132] ; 14224 <free@plt+0x3650>
1419c: ebfff21a bl 10a0c <printf@plt>
141a0: e1a00005 mov r0, r5
141a4: ebfff28a bl 10bd4 <free@plt>
--
14a08: e59f144c ldr r1, [pc, #1100] ; 14e5c <free@plt+0x4288>
14a0c: e5907000 ldr r7, [r0]
14a10: e1a05000 mov r5, r0
14a14: e5980000 ldr r0, [r8]
14a18: ebfff025 bl 10ab4 <fprintf@plt>
14a1c: e1a00007 mov r0, r7
14a20: e5988000 ldr r8, [r8]
14a24: ebffeffb bl 10a18 <strerror@plt>
14a28: e59f3430 ldr r3, [pc, #1072] ; 14e60 <free@plt+0x428c>
14a2c: e58d7000 str r7, [sp]
14a30: e3a02008 mov r2, #8
14a34: e59f1428 ldr r1, [pc, #1064] ; 14e64 <free@plt+0x4290>
14a38: e58d0004 str r0, [sp, #4]
14a3c: e1a00008 mov r0, r8
14a40: ebfff01b bl 10ab4 <fprintf@plt>
14a44: e5953000 ldr r3, [r5]
14a48: e3530002 cmp r3, #2
14a4c: 1a000002 bne 14a5c <free@plt+0x3e88>
14a50: e59f1400 ldr r1, [pc, #1024] ; 14e58 <free@plt+0x4284>
14a54: e59f040c ldr r0, [pc, #1036] ; 14e68 <free@plt+0x4294>
14a58: ebffefeb bl 10a0c <printf@plt>
14a5c: e59d3048 ldr r3, [sp, #72] ; 0x48
14a60: e2033a0f and r3, r3, #61440 ; 0xf000
[*] Function printf used 5 times nandwrite