ropshell> use c32d033baa841c18c1b5f5f656ddcdc5 (download)
name         : libnsl.so.1 (arm/ELF)
base address : 0x3aa8
total gadgets: 384

ropshell> suggest "load mem"
> 0x0000eabf : ldr r0, [r3, r0]; bx lr
> 0x000059ca : ldr r7, [ip]; blx r7
> 0x00008492 : ldr r4, [lr]; blx r4
> 0x0000487e : ldr r8, [lr]; blx r8
> 0x0000e05a : ldr sl, [lr]; blx sl
> 0x0000426a : ldr r7, [r5, #8]; blx r7
> 0x0000de52 : ldr r2, [ip, #0x18]; blx r4
> 0x00004906 : ldr r3, [lr, #0x10]; blx r3
> 0x0000dce2 : ldr r4, [r1, r3]; mov r1, r4; blx r5
> 0x00003ac2 : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
> 0x0000c8f2 : ldr r0, [pc, #0x10]; add r0, pc, r0; pop {r4, pc}
> 0x00005bf6 : ldr r3, [pc, r3]; str r1, [r2, r3]; pop {r4, pc}
> 0x0000e99f : ldr r2, [pc, #0x10]; ldr r0, [r3, r2]; bx lr
> 0x00007e0a : ldr r3, [r0, #0x20]; ldr r3, [r3, #0x10]; blx r3
> 0x0000ece9 : ldr r3, [r2, #4]; ldr r2, [sp]; str r3, [r2]; bx lr
> 0x00004dde : ldr r3, [r7, #4]; ldr r3, [r3, #0x10]; blx r3
> 0x0000de4e : ldr r4, [ip, #0x14]; ldr r2, [ip, #0x18]; blx r4
> 0x0000db72 : ldr r3, [r6, #4]; mov r0, r6; ldr r3, [r3, #0x10]; blx r3
> 0x00005506 : ldr r3, [r5]; cmp r3, #0; moveq r4, #6; mov r0, r4; add sp, sp, #0x1c; pop {r4, r5, r6, r7, pc}
> 0x00007e16 : ldr r0, [r4]; ldr r3, [r0, #4]; pop {r4, lr}; ldr r3, [r3, #0x10]; bx r3
> 0x0000eae3 : ldr r3, [r4, #0x10]; mov r1, r4; movs r0, #1; str r7, [r4, #0x14]; blx r3
> 0x00005106 : ldr r0, [r5, #0x5c]; ldr r3, [r0, #4]; ldr r3, [r3, #0x10]; blx r3
> 0x0000e04a : ldr ip, [r5, ip]; mov r3, r7; mov r1, #0x11; str ip, [sp]; ldr sl, [lr]; blx sl
> 0x00005036 : ldr r0, [r6, #0x5c]; ldr r3, [r0, #4]; ldr r3, [r3, #0x10]; blx r3
> 0x0000dcda : ldr r1, [fp, #-0x3c]; vstr d16, [fp, #-0x2c]; ldr r4, [r1, r3]; mov r1, r4; blx r5
> 0x0000425a : ldr r3, [fp, #-0x50]; mov r1, sl; mov r2, r8; stm sp, {r7, ip}; ldr r7, [r5, #8]; blx r7
> 0x0000de46 : ldr r1, [r7, r5, lsl #2]; mov r0, sp; ldr r4, [ip, #0x14]; ldr r2, [ip, #0x18]; blx r4
> 0x0000dbce : ldr r1, [r3, #0x14]; ldr r3, [r3, #0x18]; str r1, [fp, #0xc]; str r3, [fp, #0x10]; blx r2
> 0x0000eadf : ldr r7, [r6, #0x40]; mov r2, r6; ldr r3, [r4, #0x10]; mov r1, r4; movs r0, #1; str r7, [r4, #0x14]; blx r3
> 0x00004cc2 : ldr lr, [ip, #4]; stm r6, {r0, r1, r2, r3}; mov r0, ip; ldr r3, [lr, #0x10]; strh r5, [sp, #0x5a]; blx r3
> 0x0000dcd2 : ldr r5, [r1, #8]; mov r2, r8; ldr r1, [fp, #-0x3c]; vstr d16, [fp, #-0x2c]; ldr r4, [r1, r3]; mov r1, r4; blx r5
> 0x0000dbc6 : ldr r2, [r0, #0x20]; ldr r2, [r2, #0x10]; ldr r1, [r3, #0x14]; ldr r3, [r3, #0x18]; str r1, [fp, #0xc]; str r3, [fp, #0x10]; blx r2