ropshell> use 35a3115eb9749638fd5e19c26c7fa752 (download)
name         : httpd (arm/ELF)
base address : 0xf9b0
total gadgets: 780

ropshell> suggest "load mem"
> 0x000cec6a : ldr r2, [r0, #0xc]; bxle lr
> 0x000ca45e : ldr ip, [r4, #0x8d8]; blx ip
> 0x0001ca92 : ldr r0, [fp, #-0x10]; blx r3
> 0x0009dd26 : ldr r1, [fp, #-0x10]; blx r3
> 0x000171f2 : ldr r2, [fp, #0xc]; blx r3
> 0x000a89ea : ldr r3, [fp, #-0x18]; blx ip
> 0x000c9276 : ldr r3, [r0, #0x888]; str r3, [r1]; bx lr
> 0x0009defa : ldr r2, [pc, #0x128]; add r2, r4, r2; mov r1, r2; blx r3
> 0x000cef36 : ldr r3, [r2, r3, lsl #2]; lsl r0, r0, #2; cmp r3, #0; bxeq lr
> 0x000d19ca : ldr r2, [r4]; mov r0, #0; str r3, [r4, #0xc]; str r2, [r4, #4]; pop {r4, pc}
> 0x000cee96 : ldr r3, [r5, #8]; mov r0, #0; str r1, [r4]; str r3, [r4, #8]; pop {r4, r5, r6, pc}
> 0x0003f8da : ldr r3, [pc, #0x1fc]; add r3, r5, r3; ldr r3, [r3]; mov r0, #0x40; blx r3
> 0x000cc57e : ldr r0, [r4, #0x898]; ldr r2, [r4, #0x78]; ldr r3, [r4, #0x7c]; blx ip
> 0x000d79da : ldr r3, [r4, #4]; str r3, [r2, #4]; mov r0, #0; str r0, [r5, #0x30c]; pop {r3, r4, r5, pc}
> 0x0003f23a : ldr r1, [pc, #0x1c]; add r3, r3, r1; str r2, [r3]; add sp, fp, #0; ldm sp!, {fp}; bx lr
> 0x0002ddb2 : ldr r1, [r2, #4]; ldr r2, [fp, #-8]; ldr r2, [r2, #0xc]; mov r0, r1; mov r1, r2; blx r3
> 0x0003f236 : ldr r2, [r3, r2]; ldr r1, [pc, #0x1c]; add r3, r3, r1; str r2, [r3]; add sp, fp, #0; ldm sp!, {fp}; bx lr
> 0x000cec56 : ldr r1, [r0, #4]; mov r3, #0; str r3, [r0, #8]; str r3, [r0]; cmp r1, r3; ldr r2, [r0, #0xc]; bxle lr
> 0x000a89da : ldr ip, [r3]; ldr r0, [fp, #-0x1c]; ldr r1, [fp, #-0x20]; ldr r2, [fp, #-0x24]; ldr r3, [fp, #-0x18]; blx ip