ropshell> use 8e858af73d51196f82ac50f541148b0a (download)
name         : fact (arm/ELF)
base address : 0x10170
total gadgets: 1863

ropshell> suggest "load mem"
> 0x00049d7a : ldr r0, [r2]; pop {r4, pc}
> 0x0004997e : ldrne r0, [r3]; pop {r4, pc}
> 0x000289c2 : ldr r0, [r4]; blx r5
> 0x0004b476 : ldr r0, [r5]; blx r6
> 0x00010f6a : ldr r0, [r7]; blx r3
> 0x00058ed6 : ldr r3, [r7]; blx r3
> 0x00028d72 : ldr r1, [r3]; mov r0, r8; blx sb
> 0x00028cca : ldr r1, [r4]; mov r0, r6; blx r5
> 0x00016be6 : ldr r3, [r6], #4; blx r3
> 0x000183b2 : ldr ip, [r6, #0xc]; blx ip
> 0x0005a0d2 : ldr ip, [r7, #0x108]; blx ip
> 0x00059636 : ldr r3, [r8, #-0x4]!; blx r3
> 0x0002189e : ldr r3, [sl, #0x488]; blx r3
> 0x000504b6 : ldr r0, [fp, #0x10]; blx r2
> 0x0002c20e : ldr r2, [fp, #-0x3c]; blx r2
> 0x00063f1e : ldr r2, [r0, #0x240]; str r2, [r3]; pop {r4, pc}
> 0x00029806 : ldr r2, [r4]; str r2, [r3, #4]; pop {r4, r5, r6, pc}
> 0x00063ec6 : ldr r3, [r4, #0xc]; str r0, [r3]; pop {r4, pc}
> 0x000547b5 : ldr r4, [r5, r6]; movs r4, r0; blx lr
> 0x000237ad : ldr r0, [r6, #0x10]; movs r7, r0; bx r8
> 0x00066aee : ldr r2, [sl]; add r3, r3, r2; blx r3
> 0x0002b066 : ldr r3, [pc, #0x20]; str r0, [r3]; pop {r4, pc}
> 0x00071852 : ldr ip, [r0], #4; str ip, [r3]; bx lr
> 0x00049ab2 : ldr r2, [r1, #0x18]; cmp r2, #0; bxne lr
> 0x00019082 : ldr r3, [r2]; mov r0, r3; add sp, sp, #0x18; pop {r4, r5, r6, pc}
> 0x0001902e : ldr r6, [r5, #0xc]; mov r0, r5; blx r6
> 0x00018002 : ldr r7, [r5, #0xc]; mov r0, r5; blx r7
> 0x00018e16 : ldr r8, [r5, #0x18]; mov r0, r5; blx r8
> 0x0001846a : ldr r4, [r6, #0xc]; mov r0, r6; blx r4
> 0x000196ce : ldr r5, [r6, #0x18]; mov r0, r6; blx r5
> 0x00057836 : ldr r0, [lr]; add r0, r0, #1; str r0, [lr]; pop {r4, r5, r6, pc}
> 0x0004f10e : ldr r1, [pc, #0x24]; mov r0, r3; str ip, [r1]; pop {r7, pc}
> 0x00019306 : ldr r2, [pc, r2]; str ip, [r0, r2]; mov r0, r1; pop {r4, r5, r6, pc}
> 0x0005546a : ldr r1, [sl]; ldr r0, [r2]; add r3, r3, r1; blx r3
> 0x0005abc6 : ldr r0, [pc, #0x11c]; mov r0, r0; add sp, sp, #0x18; pop {r4, r5, r6, pc}
> 0x00017fa6 : ldr r2, [r3, #4]; str r2, [r3]; add sp, sp, #0x1c; pop {r4, r5, r6, r7, pc}
> 0x000385c6 : ldr r3, [ip, r3, lsl #2]; str r2, [fp, #-0x480]; blx r3
> 0x00014be9 : ldr r4, [r2, r0]; movs r0, r1; lsls r4, r7, #5; movs r2, r1; blx r1
> 0x00042f9e : ldr r6, [r2]; ldr r3, [r3, #0x1c]; mov r2, r6; mov r0, r5; blx r3
> 0x0001889e : ldr r5, [r4, #0x58]; ldr r3, [r5, #0x10]; mov r0, r5; blx r3
> 0x00019606 : ldr r6, [r4, #0x58]; ldr r3, [r6, #0x10]; mov r0, r6; blx r3
> 0x0001de12 : ldr r3, [r5, #8]; add r3, r3, #1; str r3, [r5, #8]; pop {r4, r5, r6, pc}
> 0x00027636 : ldr r4, [pc, #0x488]; mvnhi r4, #0; mov r0, r4; add sp, sp, #0x2c; pop {r4, r5, r6, r7, pc}
> 0x0001bf22 : ldr r1, [r2, #0x40]; mov r0, r4; mov r2, r3; asr r3, r3, #0x1f; blx r1
> 0x00057832 : ldr lr, [pc, #0xc8]; ldr r0, [lr]; add r0, r0, #1; str r0, [lr]; pop {r4, r5, r6, pc}
> 0x0003e24a : ldr r1, [fp, #-0x8c]; ldr r3, [r3, #0x1c]; mov r2, r6; mov r0, r5; blx r3
> 0x00010f5e : ldr r7, [pc, #0x234]; add r6, r4, r6; ldr r3, [r8]; ldr r0, [r7]; blx r3
> 0x0001f012 : ldr r8, [pc, #0x88]; mov r0, #0; ldr r3, [r8, #0x488]; mov r6, r2; blx r3
> 0x0006e872 : ldr r4, [r0]; orr r3, r3, r2, lsl #12; ror r5, r3, #0xc; mov r0, r4; mov r1, r5; pop {r4, r5}; bx lr
> 0x00057dde : ldr r0, [r1, r3, lsl #3]; cmn r0, #1; moveq r0, #0; ldr pc, [sp], #4; mov r0, r3; bx lr
> 0x00028ab2 : ldr r3, [r0, #8]; str r1, [r0, #4]; str r3, [lr, #4]; str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}
> 0x00070262 : ldr r2, [r5, #0x40]; ldr r3, [r4, #0x10]; str r2, [r4, #0x14]; mov r1, r4; mov r2, r5; mov r0, #1; blx r3
> 0x00028b0a : ldrge r3, [r1, #4]; strlt r3, [lr, #4]; strge r3, [lr, #8]; strlt lr, [r1, #8]; strge lr, [r1, #4]; pop {r4, pc}
> 0x0001ea3e : ldr r1, [r0, r3]; str ip, [r0, r3]; str r1, [r2, #4]; ldr r3, [r2, #0x18]; add r3, r3, #1; str r3, [r2, #0x18]; pop {r4, r5, r6, pc}