ropshell> use b7f8fd5f3c6631031d7297b64179b84d (download)
name         : libc-2.13.so (arm/ELF)
base address : 0x154a0
total gadgets: 4829

ropshell> suggest "load mem"
> 0x0006438a : ldrlo r0, [r2]; bx lr
> 0x000d183a : ldr r0, [r1, r3]; bx lr
> 0x00017306 : ldr r0, [r3, r2]; bx lr
> 0x0007fdca : ldr r3, [r0]; cmp r3, r1; bxeq lr
> 0x0006c70e : ldr ip, [r3]; mov lr, pc; bx ip
> 0x000ce78e : ldr r0, [r4]; mov lr, pc; bx r5
> 0x000197ca : ldr ip, [r4]; mov lr, pc; bx ip
> 0x000ce676 : ldr r1, [r5]; mov lr, pc; bx r6
> 0x0001d686 : ldr ip, [r5]; mov lr, pc; bx ip
> 0x0008082a : ldr r0, [r6]; mov lr, pc; bx r5
> 0x00019dae : ldr ip, [r6]; mov lr, pc; bx ip
> 0x000707d2 : ldr ip, [sl]; mov lr, pc; bx ip
> 0x000a983a : ldr r0, [ip, #8]; bx lr
> 0x0005c22a : ldr r2, [r0]; tst r2, #8; bxeq lr
> 0x000d4cbe : ldr r2, [r1, #4]; cmp r3, r2; bxhs lr
> 0x000d4d02 : ldr r3, [r1, r3]; add r0, r0, r3; bx lr
> 0x0005e48e : ldr ip, [r1, #0x24]; mov lr, pc; bx ip
> 0x000f745e : ldr ip, [r2, #0xc]; mov lr, pc; bx ip
> 0x000d629a : ldr r1, [r3, #4]; cmp r2, r1; bxhs lr
> 0x000d62c6 : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
> 0x000756c6 : ldr r0, [r5, #0x24]; mov lr, pc; bx r3
> 0x000301a6 : ldr r3, [r6], #4; mov lr, pc; bx r3
> 0x0009fabe : ldr ip, [r7, #0x10]; mov lr, pc; bx ip
> 0x000233da : ldr ip, [r8, #0xa8]; mov lr, pc; bx ip
> 0x0009fa72 : ldr r0, [fp, #-0x21c]; mov lr, pc; bx r4
> 0x000ce81a : ldr r2, [fp, #-0x2c]; mov lr, pc; bx r2
> 0x00099216 : ldr r3, [fp, #-0x4c]; mov lr, pc; bx r3
> 0x000f9eae : ldr r3, [lr, #0x944]; mov lr, pc; bx r3
> 0x0006a1c6 : ldr r3, [r2, #0x30]; cmp r3, #0; bxeq lr
> 0x00019a82 : ldr r3, [ip]; ldr ip, [r4]; mov lr, pc; bx ip
> 0x0003946a : ldr r0, [pc, #0x10]; add r0, r3, r0; bx lr
> 0x00015b1e : ldr r3, [pc, r3]; add r0, r0, r3; pop {lr}; bx lr
> 0x00075752 : ldr r3, [r4, r3]; ldr ip, [r3]; mov lr, pc; bx ip
> 0x000e7d5e : ldr r7, [r4]; ldr ip, [ip, r5]; mov lr, pc; bx ip
> 0x000707ce : ldr sl, [lr, r3]; ldr ip, [sl]; mov lr, pc; bx ip
> 0x000e3112 : ldr r1, [pc, #0x14]; str r2, [r3, r1]; bx lr
> 0x000d278a : ldr r7, [pc, #0x74]; svc #0; mov r7, ip; bxlo lr
> 0x000cec96 : ldr r1, [r4]; ldr r3, [sp, #0xc]; mov lr, pc; bx r3
> 0x0009ce36 : ldr r3, [r5, #4]; cmp r3, #0; movne lr, pc; bxne r3
> 0x000e46a2 : ldr r0, [r8]; ldr ip, [sp, #0xc]; mov lr, pc; bx ip
> 0x00015736 : ldr r1, [ip]; ldr ip, [r3, #0x110]; mov lr, pc; bx ip
> 0x000f7782 : ldr r1, [fp, #-0x74]; ldr ip, [r5]; mov lr, pc; bx ip
> 0x00106a11 : ldr r5, [pc, #0x34c]; asrs r2, r4, #1; blx lr
> 0x000157de : ldr r2, [pc, r2]; str r1, [r0, r2]; mvn r0, #0; bx ip
> 0x0006853a : ldr r1, [r0, #0x98]; ldr ip, [r1, #0x40]; mov lr, pc; bx ip
> 0x00050c9a : ldr r2, [r4, #-0x5c]; ldr ip, [r3, #0x1c]; mov lr, pc; bx ip
> 0x0006448a : ldr sl, [r4, #0x18]; ldr ip, [r5, #0xa0]; mov lr, pc; bx ip
> 0x000fc03a : ldr r3, [r7, #8]; ldr ip, [r3, #0x10]; mov lr, pc; bx ip
> 0x000525ae : ldr r2, [lr, #-0x5c]; ldr ip, [r3, #0x1c]; mov lr, pc; bx ip
> 0x000396fe : ldr lr, [r4, #0x58]; ldr r4, [r4, #0x30]; mov r0, #0; bx lr
> 0x00019da6 : ldr r2, [r6, #0xc]; ldr r3, [ip]; ldr ip, [r6]; mov lr, pc; bx ip
> 0x000653c2 : ldr r5, [r4, #0x58]; mov r0, r5; ldr ip, [r5, #0x10]; mov lr, pc; bx ip
> 0x000f9ea6 : ldr r0, [lr, #0x940]; mov r1, r4; ldr r3, [lr, #0x944]; mov lr, pc; bx r3
> 0x000156be : ldr r4, [pc, #0xe4]; add r4, ip, r4; ldr ip, [r4, #0xc8]; mov lr, pc; bx ip
> 0x000df516 : ldrne ip, [pc, #0x1c]; addne r3, r3, ip; ldrne ip, [r3, #0x50]; movne lr, pc; bxne ip
> 0x000f5f2a : ldr r2, [ip, #0x1ac]; add r1, ip, #0x1c; ldr ip, [r3, #0xc]; mov lr, pc; bx ip
> 0x0004f7e6 : ldr r1, [lr, #-0x8c]; ldr r3, [ip]; ldr ip, [r3, r2, lsl #2]; mov lr, pc; bx ip
> 0x0001f302 : ldr r2, [r7]; mov r1, r8; str r5, [sp]; mov r3, r6; ldr ip, [r4, #4]; mov lr, pc; bx ip
> 0x0001ede6 : ldr r2, [sl]; mov r1, r6; str r7, [sp]; mov r3, r5; ldr ip, [r4, #4]; mov lr, pc; bx ip
> 0x0010b33e : ldr lr, [fp, #-0x84]; str ip, [sp, #4]; str lr, [fp, #-0x38]; mov lr, pc; bx sb
> 0x000f7346 : ldr r2, [r5, r3]; mov r0, r6; ldr r3, [r5, #0x10]; ldr ip, [r3, #0xc]; mov lr, pc; bx ip
> 0x0003d3a6 : ldr ip, [lr]; add r2, r6, r2; ldr r7, [r4, #8]; ldr ip, [ip, r7, lsl #2]; mov lr, pc; bx ip
> 0x0001fa46 : ldrsheq r7, [r1], -r8; ldr r3, [pc, #0xc]; ldr r2, [pc, #0xc]; add r3, pc, r3; ldr r0, [r3, r2]; bx lr
> 0x0010a0ca : ldr r8, [pc, #0x110]; ldr r4, [pc, #0x110]; ldr r3, [r5, r8]; ldr ip, [r3, #0x14]; mov lr, pc; bx ip
> 0x0001730e : ldrsheq pc, [r1], -r8; andeq r3, r0, r4, asr r1; ldr r3, [pc, #0xc]; ldr r2, [pc, #0xc]; add r3, pc, r3; ldr r0, [r3, r2]; bx lr
> 0x0004d7a2 : ldr r5, [r6, #0x48]; str r7, [r5, #8]; ldr r3, [r5, #4]; add r3, r3, #1; str r3, [r5, #4]; pop {r4, r5, r6, r7, r8, lr}; bx lr