ropshell> use f4614db96ff7f7d8edbe59340f4535da (download)
name         : mtower_s.elf (arm/ELF)
base address : 0x10000
total gadgets: 565

ropshell> suggest "load mem"
> 0x00014001 : ldrh.w r2, [r3]; pop {r4, pc}
> 0x000149cf : ldr r0, [r3]; bx lr
> 0x000144cb : ldr r0, [r6]; blx r3
> 0x0001341d : ldr r1, [r6]; blx r3
> 0x00012b77 : ldr r0, [pc, #0x14]; pop {r4, r5, r6, pc}
> 0x0001d123 : ldr r0, [r2, r1]; eors r0, r3; pop {r4, r5, pc}
> 0x00012d33 : ldr r0, [r4, #0x18]; blx r3
> 0x0001bb5d : ldr r5, [r4, #0x20]; blx r5
> 0x0001aeed : ldr r6, [r4, #0x24]; blx r6
> 0x0001a8d9 : ldr r7, [r4, #0x24]; blx r7
> 0x000143c1 : ldr r0, [r5, #0x14]; blx r3
> 0x000196a1 : ldr r1, [r3]; ldr r0, [sp]; blx r2
> 0x0001ec4d : ldr.w r4, [fp, #0x240]; adds r0, #1; pop {r4, pc}
> 0x0001e2e5 : ldr r3, [r0, #0x54]; movs r0, r5; blx r3
> 0x000149b3 : ldr r4, [r3, #4]; movs r3, r5; blx r4
> 0x0001a86b : ldr r1, [r4, #0x1c]; mov r0, r8; blx r6
> 0x0001bf27 : ldr r6, [r3, r0]; movs r3, r5; movs r0, r4; blx r6
> 0x0001341b : ldr r2, [r6, #4]; ldr r1, [r6]; blx r3
> 0x00011201 : ldr r4, [pc, #0x278]; movs r0, r4; add sp, #0x44; pop {r4, r5, r6, r7, pc}
> 0x0001cd69 : ldr r3, [r2, #0x5c]; movs r1, r6; movs r0, r5; blx r3
> 0x00014697 : ldr r4, [r1, #0x28]; ldr r1, [sp, #4]; blx r4
> 0x0001234d : ldr r2, [r4, #0x1c]; ands r3, r2; str r3, [r4, #0x1c]; pop {r4, pc}
> 0x0001bc1d : ldr r3, [r4, #0x50]; adds r3, r3, r0; str r3, [r4, #0x50]; pop {r4, r5, r6, pc}
> 0x000148b9 : ldr r3, [r5, #0x10]; ldr r3, [r3, #0x10]; movs r0, r5; blx r3
> 0x0001234b : ldr r3, [pc, #0x38]; ldr r2, [r4, #0x1c]; ands r3, r2; str r3, [r4, #0x1c]; pop {r4, pc}
> 0x0001de3d : ldr r2, [r5]; lsls r2, r2, #2; ldr r3, [r2, r3]; ldr r3, [r3, #0x28]; blx r3
> 0x0001b42f : ldr r2, [r0]; str r2, [r3]; movs r3, #0; str r3, [r0, #0x10]; str r3, [r0, #0xc]; pop {r4, r5, r6, pc}