ropshell> use 1a01fd3e49ee5952eeef3c56c8c2ff7b (download)
name         : fotaClient (arm/ELF)
base address : 0xc4c8
total gadgets: 638
ropshell> suggest "load mem"
> 0x0001c4e6 : ldr r0, [r4]; pop {r3, r4, r5, pc}
> 0x00015a42 : ldr r3, [r2]; blx r3
> 0x0000d67e : ldr r0, [pc, #0x2c]; pop {r4, pc}
> 0x00017632 : ldr r2, [r0, #8]; bxeq lr
> 0x0000dfaa : ldr r3, [ip, #0x84]; bx r3
> 0x000173a2 : ldr r3, [r6, #4]; blx r3
> 0x00015406 : ldr r3, [r7, #4]; blx r3
> 0x00017052 : ldr r3, [sl, #4]; blx r3
> 0x0001e36e : ldr r0, [fp, #-0x20]; blx r3
> 0x00020122 : ldr r1, [fp, #-8]; blx r3
> 0x0002bdfe : ldr r2, [fp, #-0x2c]; blx r3
> 0x0001e3fa : ldr r3, [fp, #-0x18]; blx ip
> 0x0001c92a : ldr ip, [r0, #0x1dc]; cmp r1, ip; bxlt lr
> 0x0000c75e : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
> 0x00016996 : ldr r0, [r8]; movw sl, #0xf858; blx r3
> 0x0000c78a : ldr r2, [pc, #0x10]; cmp r2, #0; bxeq lr
> 0x0000dee6 : ldr r3, [pc, #0x24]; ldrh r0, [r3]; bx lr
> 0x0001d77a : ldr r3, [r4]; mov r0, r4; ldr r3, [r3]; blx r3
> 0x0001d7a2 : ldr r3, [r5]; mov r0, r5; ldr r3, [r3]; blx r3
> 0x000171fe : ldr r0, [r7], #4; movt fp, #3; blx r2
> 0x0001d752 : ldr r0, [r6], #4; ldr r3, [r0]; ldr r3, [r3]; blx r3
> 0x000171fa : ldr r2, [sl, #4]; ldr r0, [r7], #4; movt fp, #3; blx r2
> 0x0001540e : ldr r0, [r5, #8]; str r4, [r5, #4]; str r6, [r5]; add r0, r6, r0; pop {r3, r4, r5, r6, r7, pc}
> 0x00016a52 : ldr r0, [r3]; ldrh r3, [r3, #4]; str r0, [r2]; strh r3, [r2, #4]; mov r0, ip; pop {r4, pc}
> 0x000154aa : ldr r3, [r0, #0xc]; str r1, [r0, #0x20]; orr r3, r3, #0x100; str r1, [r0, #4]; str r3, [r0, #0xc]; str r1, [r0]; pop {r3, r4, r5, pc}