ropshell> use 9165d45be0264f07b443dd7a2938e7e6 (download)
name         : libc.so (arm/ELF)
base address : 0x11050
total gadgets: 2181

ropshell> suggest "load mem"
> 0x00049571 : ldr r0, [r2]; pop {r3, r4, r5, pc}
> 0x00038fc7 : ldr r0, [r4]; pop {r3, r4, r5, r6, r7, pc}
> 0x000140b3 : ldr r0, [r5]; pop {r4, r5, r6, pc}
> 0x000138f1 : ldrh r1, [r0, r4]; pop {r0, r4, r5, pc}
> 0x00012791 : ldr r3, [r2]; blx r3
> 0x00038f5f : ldr r1, [r3]; blx r6
> 0x0003f6cd : ldrh r7, [r3, #0x3a]; pop {r4, r5, pc}
> 0x00038fbf : ldr r1, [r5]; blx r7
> 0x0001c9af : ldrh r0, [r6, #0x3e]; pop {r1, r2, r4, r6, pc}
> 0x00040209 : ldr r1, [r6]; blx sb
> 0x0004083f : ldr r2, [r6]; blx sb
> 0x00045505 : ldr.w r1, [fp]; blx r5
> 0x00025935 : ldr r3, [pc, #0x10]; pop {r4, pc}
> 0x0001b46d : ldr r5, [pc, #0x50]; pop {r4, r5, r6, r7, pc}
> 0x0004956f : ldr r2, [r1]; ldr r0, [r2]; pop {r3, r4, r5, pc}
> 0x0003e399 : ldr r2, [r3]; add r0, r2; bx lr
> 0x00015587 : ldr r3, [r4]; str r3, [r0]; pop {r4, pc}
> 0x0002dc01 : ldrh r4, [r0, r4]; vmov r0, r1, d5; pop {r4, pc}
> 0x00015629 : ldr r0, [pc, #0x14]; add r0, pc; pop {r3, r4, r5, pc}
> 0x000245af : ldrh r2, [r0, #0x18]; vmov r0, r1, d1; pop {r4, pc}
> 0x00016279 : ldr r3, [r5]; str r3, [r2, #0x14]; pop {r3, r4, r5, pc}
> 0x0004e40d : ldr.w r0, [r1, r0, lsl #2]; add sp, #8; pop {r4, pc}
> 0x00040207 : ldr r6, [r3, r5]; ldr r1, [r6]; blx sb
> 0x0002a5e5 : ldr r1, [r4, #0xc]; str r7, [r1, r6]; pop {r3, r4, r5, r6, r7, pc}
> 0x000561a2 : ldr ip, [pc, #4]; add ip, pc, ip; bx ip
> 0x00045503 : ldr r5, [r1, #4]; ldr.w r1, [fp]; blx r5
> 0x00017f31 : ldr r5, [r4, #0x24]; str r2, [r5, #4]; pop {r4, r5, r6, pc}
> 0x0001d5bd : ldr.w r2, [r8]; ldr.w r6, [r4, #0x1c0]; blx r6
> 0x0005440e : ldr r2, [pc, #0x18]; ldr r0, [r3, r2]; bx lr
> 0x00023f15 : ldr r3, [r1, #0x14]; str r3, [r0, #0x2c]; bx lr
> 0x00050a51 : ldr.w r4, [r1, r5, lsl #2]; str r2, [r4, #8]; pop {r4, r5, r6, pc}
> 0x0004954d : ldr r0, [r3]; str.w r5, [r0, r4, lsl #2]; mov r0, r5; pop {r3, r4, r5, pc}
> 0x000464b9 : ldrh r0, [r7, #0x3e]; nop ; movs r2, #0x30; movs r2, r0; pop {r1, r3, r4, r5, r7, pc}
> 0x00033a2d : ldr r2, [r4, #0x50]; add r2, r0; str r2, [r4, #0x50]; pop {r4, pc}
> 0x000165cb : ldr r6, [r7, #4]; ldr r0, [r7, #8]; blx r6
> 0x000301d9 : ldr.w r2, [fp, #4]; ldr r0, [sp, #0x18]; blx r2
> 0x0003d7e7 : ldr r7, [pc, #0x18]; add r7, pc; str r7, [r5, #0x28]; pop {r3, r4, r5, r6, r7, pc}
> 0x00016595 : ldr r3, [r0, #0x2c]; str r3, [r4]; str r4, [r0, #0x2c]; pop {r4, r5, r6, pc}
> 0x0004956b : ldr r1, [pc, #0x14]; add r1, pc; ldr r2, [r1]; ldr r0, [r2]; pop {r3, r4, r5, pc}
> 0x00012959 : ldr.w lr, [pc, #0x2c]; add lr, pc; add.w r0, lr, #8; blx r4
> 0x0005491e : ldr r1, [r2, #4]; ldr r2, [sp]; mov r0, r3; str r1, [r2]; bx lr
> 0x0002a279 : ldr r4, [pc, #0x1e0]; orr.w r2, ip, r2; str.w r2, [r3, r1, lsl #2]; pop {r3, pc}
> 0x000165c7 : ldr r3, [r7]; str r3, [r4, #0x2c]; ldr r6, [r7, #4]; ldr r0, [r7, #8]; blx r6
> 0x00031fd7 : ldr r6, [r4, r1]; str r6, [r0, #0x28]; ldr r4, [r4, r5]; str r4, [r0, #0x20]; add sp, #0xc; pop {r4, r5, r6, r7, pc}