ropshell> use 0e58e8ae196d8789ec9c3a5a78ca06b2 (download)
name         : main.elf (arm/ELF)
base address : 0x8000000
total gadgets: 750

ropshell> suggest "write mem"
> 0x08000b11 : str r4, [r3]; pop {pc}
> 0x0800462f : str r3, [r2]; pop {r3, pc}
> 0x08004441 : str r0, [r3]; pop {r3, pc}
> 0x08003ffd : str r1, [r4]; pop {r3, r4, r5, pc}
> 0x08004ed5 : str r3, [r5]; pop {r3, r4, r5, pc}
> 0x08002eaf : str r0, [r2]; bx lr
> 0x080011c7 : str r5, [r7, r4]; pop {r3, r4, r5, r6, r7, pc}
> 0x08001413 : str r1, [r0, #0x24]; pop {r4, r5, r6, r7, pc}
> 0x080043af : str r3, [r1, r2]; bx lr
> 0x08002cf9 : str r1, [r3, r0]; bx lr
> 0x0800409b : str r2, [r0, #0x14]; bx lr
> 0x08002cd3 : str r0, [r6, #4]; bx lr
> 0x08001c0d : str r3, [r6, #0x18]; mov r0, r5; pop {r4, r5, r6, pc}
> 0x080040cf : str r4, [r0, #0x14]; pop {r4, r5}; bx lr
> 0x080018df : strh.w r2, [r3, #0x1fc]; movs r0, #0; pop {r4, r5, r6, r7, pc}
> 0x080039c7 : str.w r1, [r2, r3, lsl #2]; movs r0, #0; bx lr
> 0x0800130f : strh r2, [r4, #8]; ldr r3, [r3, #4]; mov r0, r5; blx r3
> 0x08002fe1 : str r3, [r0, #0x30]; adds r3, #1; lsls r3, r3, #1; udiv r0, r0, r3; pop {r3, pc}
> 0x08002b9f : str r0, [r1, r2]; ldr r2, [r3, #0x1c]; adds r2, #4; str r2, [r3, #0x1c]; ldr r4, [sp], #4; bx lr