ropshell> use 6d7540510395dd36bd884a8036cc8396 (download)
name         : libc.so.6 (arm/ELF)
base address : 0x1efc0
total gadgets: 5523

ropshell> suggest "load mem"
> 0x0005642b : ldr r0, [r2]; pop {r4, r5, r6, pc}
> 0x000560c7 : ldr r0, [r3]; pop {r3, r4, r5, pc}
> 0x000b6aab : ldr.w fp, [r2, r4]; pop {r4, pc}
> 0x000e5249 : ldr r0, [r6, r3]; pop {r4, r5, r6, pc}
> 0x00062fab : ldrsh.w r2, [r6, fp]; pop {r3, r4, r5, pc}
> 0x000c66c3 : ldr r1, [r0, #0x50]; pop {r4, r5, r6, pc}
> 0x0002d705 : ldrh r2, [r0, #0x18]; pop {r3, pc}
> 0x0009b08f : ldrh.w r4, [r0, #0x628]; pop {r4, r5, r6, pc}
> 0x000b2c8f : ldr r5, [r3]; mov r0, r5; pop {r4, r5, r6, pc}
> 0x0002c193 : ldr r7, [r3]; mov r0, r7; pop {r3, r4, r5, r6, r7, pc}
> 0x000b49e9 : ldrh.w fp, [r3, #4]; pop {r4, pc}
> 0x000b4011 : ldr r1, [r4]; blx r6
> 0x000cf92b : ldr r6, [r4]; blx r6
> 0x000cf9f5 : ldr r7, [r4]; blx r7
> 0x00073fa9 : ldr r0, [r5, #-0x18]; pop {r4, r5, r6, pc}
> 0x0005b5ef : ldr r0, [r7]; blx r3
> 0x000de8b3 : ldr r5, [r7]; blx r5
> 0x000e4747 : ldr.w r4, [ip]; blx r4
> 0x000e4b5f : ldr.w r4, [lr]; blx r4
> 0x000deca7 : ldr.w r7, [lr]; blx r7
> 0x0001f0fd : ldr r5, [pc, #0x50]; pop {r4, r5, r6, r7, pc}
> 0x000b4a15 : ldr r2, [r4]; str r2, [r3]; pop {r4, r5, r6, pc}
> 0x000218af : ldr r7, [pc, #0x3c0]; bx ip
> 0x000289a3 : ldr.w r0, [r1, r3, lsl #2]; bx lr
> 0x000d1f55 : ldr r0, [r4, r3]; add sp, #0xc; pop {r4, r5, r6, r7, pc}
> 0x00084871 : ldr r2, [r5, r2]; str r3, [r2]; pop {r3, r4, r5, pc}
> 0x000ecc4f : ldr.w r4, [r5, #0x210]; blx r4
> 0x0005414d : ldr r1, [r6, #0x24]; blx r1
> 0x0005e463 : ldr.w r3, [r7, #0x214]; blx r3
> 0x0003aad1 : ldr r0, [pc, #0x28]; add r0, pc; pop {r4, pc}
> 0x00030dc1 : ldr r3, [r2]; ldr r0, [r3, #0x34]; pop {r4, pc}
> 0x0005e4f3 : ldr r3, [r4, #8]; str r0, [r3]; pop {r4, pc}
> 0x00030b81 : ldr.w r3, [r5, #2]; str r3, [r4]; pop {r3, r4, r5, pc}
> 0x00042b89 : ldr.w r3, [ip, r3, lsl #2]; blx r3
> 0x0005e78d : ldr.w r5, [ip]; str r5, [sp]; blx r6
> 0x00076189 : ldr r4, [pc, #0x10]; pop {r4, r5}; bx lr
> 0x000e0f07 : ldrh.w r3, [r0, #0x800]; it ne; movne r0, #1; pop {r3, pc}
> 0x000a4eb5 : ldr.w r2, [r1, r2, lsl #2]; add r1, r2; bx r1
> 0x000c8bc7 : ldr.w r3, [r1, r3, lsl #2]; add r1, r3; bx r1
> 0x000a2049 : ldr.w r4, [r2, r4, lsl #2]; add r2, r4; bx r2
> 0x00044dcf : ldr.w r5, [r2, r5, lsl #2]; add r2, r5; bx r2
> 0x000de687 : ldr r6, [r3, #8]; mov r1, r5; blx r6
> 0x00020465 : ldr r1, [r7, #0x30]; mov r0, r4; blx r1
> 0x0006fc39 : ldr.w r3, [r8, r3]; ldr r3, [r3]; blx r3
> 0x0009fe0f : ldr.w r4, [r8, r4, lsl #2]; add r8, r4; bx r8
> 0x00090bb1 : ldr.w r3, [sl, #0x10]; mov r0, r8; blx r3
> 0x000bb785 : ldr r1, [pc, #0x368]; movs r6, r0; blx r3
> 0x000e5247 : ldr r3, [pc, #0x34]; ldr r0, [r6, r3]; pop {r4, r5, r6, pc}
> 0x000f0502 : ldr ip, [pc, #4]; add ip, pc, ip; bx ip
> 0x000b4a13 : ldr r3, [r6, r3]; ldr r2, [r4]; str r2, [r3]; pop {r4, r5, r6, pc}
> 0x00068ec1 : ldr.w r2, [ip, #0xc]; str r2, [r3, #0xc]; pop {r3, pc}
> 0x000670f9 : ldrh r4, [r1, #0x2e]; movs r3, r1; movs r0, #0; bx lr
> 0x0008b035 : ldr r6, [pc, #0x240]; movs r1, r1; ldr r0, [r0]; bx lr
> 0x000c42b1 : ldrsh.w fp, [pc, #0xf00]; lsls r0, r3, #2; movs r0, r0; pop {r1, r2, r6, pc}
> 0x000ecd63 : ldr.w r5, [r0, #0x204]; ldr r0, [r4, #4]; blx r5
> 0x000de693 : ldr r6, [r0, #0x20]; ldr r6, [r6, #8]; blx r6
> 0x00064f05 : ldr r4, [r3]; movs r0, #0; str r4, [r1]; add sp, #8; pop {r4, pc}
> 0x000b80c5 : ldr r2, [r3]; cmp r2, #2; itt ne; movne r2, #3; strne r2, [r3]; pop {r4, pc}
> 0x00090baf : ldr r6, [r5, r3]; ldr.w r3, [sl, #0x10]; mov r0, r8; blx r3
> 0x00030905 : ldr.w lr, [r4, #0x58]; ldr r4, [r4, #0x30]; mov.w r0, #0; bx lr
> 0x000cba03 : ldr r1, [r2, r3]; str r1, [r4, #0x10]; str r4, [r2, r3]; mov r0, r4; pop {r3, r4, r5, pc}
> 0x000e1c05 : ldr.w r0, [ip]; ldr r2, [r0, #0x20]; ldr r2, [r2, #8]; blx r2
> 0x000b14ab : ldr r2, [pc, #0x18]; adds r3, #4; add r2, pc; str r3, [r2, #0x14]; pop {r4, pc}
> 0x0001f663 : ldr r4, [r7, r4]; ldr r4, [r4]; eors r3, r4; pop.w {r4, r5, r6, r7, r8, lr}; bx r3
> 0x000ceac7 : ldr r2, [r7, #8]; ldr r0, [r4, #8]; ldr r2, [r2]; eors r0, r2; blx r3
> 0x00059efd : ldr r1, [r3]; ldr r2, [r3, #0xc]; str r1, [r3, #4]; str r2, [r3, #0x10]; pop {r4, pc}
> 0x0008b3c9 : ldr r1, [r5, #4]; add r3, r2; str r1, [r4, #0x14]; str r3, [r4, #0x10]; mov r0, r5; pop {r3, r4, r5, r6, r7, pc}
> 0x000e371f : ldr.w r2, [fp, #0x50]; mov r0, r4; ldr r1, [sp, #0xc]; ldr r2, [r2, #4]; blx r2
> 0x000a9f41 : ldr r5, [r4, #0x24]; ldr r0, [r4, #0xc]; ldr r2, [r3, r2]; add.w r3, r4, #0x14; blx r5
> 0x0002f9ab : ldr.w r1, [r8]; ldr r2, [r4, #0xc]; eors r3, r1; ldr r0, [r4, #4]; str r2, [r6, r5]; blx r3