ropshell> use 2ba15e61f3a3df34ed911eccf310ed7e (download)
name         : fact (arm/ELF)
base address : 0x10170
total gadgets: 1857

ropshell> suggest "load mem"
> 0x00049dd2 : ldr r0, [r2]; pop {r4, pc}
> 0x000499d6 : ldrne r0, [r3]; pop {r4, pc}
> 0x00028bb2 : ldr r0, [r4]; blx r5
> 0x0004b4ce : ldr r0, [r5]; blx r6
> 0x00010f5e : ldr r0, [r7]; blx r3
> 0x00058f26 : ldr r3, [r7]; blx r3
> 0x00028f62 : ldr r1, [r3]; mov r0, r8; blx sb
> 0x00028eba : ldr r1, [r4]; mov r0, r6; blx r5
> 0x00016bd6 : ldr r3, [r6], #4; blx r3
> 0x0001859e : ldr ip, [r6, #0xc]; blx ip
> 0x0005a122 : ldr ip, [r7, #0x108]; blx ip
> 0x00059686 : ldr r3, [r8, #-0x4]!; blx r3
> 0x00021a8a : ldr r3, [sl, #0x488]; blx r3
> 0x00050506 : ldr r0, [fp, #0x10]; blx r2
> 0x0002c3fe : ldr r2, [fp, #-0x3c]; blx r2
> 0x00063f6e : ldr r2, [r0, #0x240]; str r2, [r3]; pop {r4, pc}
> 0x0002363d : ldr r4, [r1, #0x30]; movs r7, r0; bx r8
> 0x00054805 : ldr r4, [r3, r5]; movs r4, r0; blx lr
> 0x000299f6 : ldr r2, [r4]; str r2, [r3, #4]; pop {r4, r5, r6, pc}
> 0x00063f16 : ldr r3, [r4, #0xc]; str r0, [r3]; pop {r4, pc}
> 0x00066b3e : ldr r2, [sl]; add r3, r3, r2; blx r3
> 0x0002b256 : ldr r3, [pc, #0x20]; str r0, [r3]; pop {r4, pc}
> 0x000718a2 : ldr ip, [r0], #4; str ip, [r3]; bx lr
> 0x00049b0a : ldr r2, [r1, #0x18]; cmp r2, #0; bxne lr
> 0x0001926e : ldr r3, [r2]; mov r0, r3; add sp, sp, #0x18; pop {r4, r5, r6, pc}
> 0x0001921a : ldr r6, [r5, #0xc]; mov r0, r5; blx r6
> 0x000181ee : ldr r7, [r5, #0xc]; mov r0, r5; blx r7
> 0x00019002 : ldr r8, [r5, #0x18]; mov r0, r5; blx r8
> 0x00018656 : ldr r4, [r6, #0xc]; mov r0, r6; blx r4
> 0x000198ba : ldr r5, [r6, #0x18]; mov r0, r6; blx r5
> 0x00057886 : ldr r0, [lr]; add r0, r0, #1; str r0, [lr]; pop {r4, r5, r6, pc}
> 0x0004f15e : ldr r1, [pc, #0x24]; mov r0, r3; str ip, [r1]; pop {r7, pc}
> 0x000194f2 : ldr r2, [pc, r2]; str ip, [r0, r2]; mov r0, r1; pop {r4, r5, r6, pc}
> 0x000554ba : ldr r1, [sl]; ldr r0, [r2]; add r3, r3, r1; blx r3
> 0x0005ac16 : ldr r0, [pc, #0x11c]; mov r0, r0; add sp, sp, #0x18; pop {r4, r5, r6, pc}
> 0x00018192 : ldr r2, [r3, #4]; str r2, [r3]; add sp, sp, #0x1c; pop {r4, r5, r6, r7, pc}
> 0x000387b6 : ldr r3, [ip, r3, lsl #2]; str r2, [fp, #-0x480]; blx r3
> 0x0004318e : ldr r6, [r2]; ldr r3, [r3, #0x1c]; mov r2, r6; mov r0, r5; blx r3
> 0x00018a8a : ldr r5, [r4, #0x58]; ldr r3, [r5, #0x10]; mov r0, r5; blx r3
> 0x000197f2 : ldr r6, [r4, #0x58]; ldr r3, [r6, #0x10]; mov r0, r6; blx r3
> 0x0001dffe : ldr r3, [r5, #8]; add r3, r3, #1; str r3, [r5, #8]; pop {r4, r5, r6, pc}
> 0x00027826 : ldr r4, [pc, #0x488]; mvnhi r4, #0; mov r0, r4; add sp, sp, #0x2c; pop {r4, r5, r6, r7, pc}
> 0x0001c10e : ldr r1, [r2, #0x40]; mov r0, r4; mov r2, r3; asr r3, r3, #0x1f; blx r1
> 0x00057882 : ldr lr, [pc, #0xc8]; ldr r0, [lr]; add r0, r0, #1; str r0, [lr]; pop {r4, r5, r6, pc}
> 0x0003e43a : ldr r1, [fp, #-0x8c]; ldr r3, [r3, #0x1c]; mov r2, r6; mov r0, r5; blx r3
> 0x00010f52 : ldr r7, [pc, #0x234]; add r6, r4, r6; ldr r3, [r8]; ldr r0, [r7]; blx r3
> 0x0001f1fe : ldr r8, [pc, #0x88]; mov r0, #0; ldr r3, [r8, #0x488]; mov r6, r2; blx r3
> 0x0006e8c2 : ldr r4, [r0]; orr r3, r3, r2, lsl #12; ror r5, r3, #0xc; mov r0, r4; mov r1, r5; pop {r4, r5}; bx lr
> 0x00057e2e : ldr r0, [r1, r3, lsl #3]; cmn r0, #1; moveq r0, #0; ldr pc, [sp], #4; mov r0, r3; bx lr
> 0x00045526 : ldr r4, [r2]; ldr r3, [r5, #0x98]; mov r1, r6; ldr r3, [r3, #0x1c]; mov r2, r4; mov r0, r5; blx r3
> 0x00028ca2 : ldr r3, [r0, #8]; str r1, [r0, #4]; str r3, [lr, #4]; str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}
> 0x000702b2 : ldr r2, [r5, #0x40]; ldr r3, [r4, #0x10]; str r2, [r4, #0x14]; mov r1, r4; mov r2, r5; mov r0, #1; blx r3
> 0x00028cfa : ldrge r3, [r1, #4]; strlt r3, [lr, #4]; strge r3, [lr, #8]; strlt lr, [r1, #8]; strge lr, [r1, #4]; pop {r4, pc}
> 0x0001ec2a : ldr r1, [r0, r3]; str ip, [r0, r3]; str r1, [r2, #4]; ldr r3, [r2, #0x18]; add r3, r3, #1; str r3, [r2, #0x18]; pop {r4, r5, r6, pc}