ropshell> use 1a01fd3e49ee5952eeef3c56c8c2ff7b (download)
name         : fotaClient (arm/ELF)
base address : 0xc4c8
total gadgets: 638

ropshell> suggest "write mem"
> 0x000154be : str r1, [r0]; pop {r3, r4, r5, pc}
> 0x0000d62e : strh r2, [r3]; pop {r4, pc}
> 0x000177a6 : str r2, [r0, #4]; pop {r4, pc}
> 0x00017a56 : strne r3, [r0, #0xc]; pop {r3, pc}
> 0x00017aaa : str r4, [r0, #0xc]; pop {r4, pc}
> 0x000176d2 : str r1, [r4, #4]; pop {r4, r5, r6, pc}
> 0x0001d666 : strh r3, [r4, #6]; pop {r4, pc}
> 0x00017736 : str ip, [r4, #4]; pop {r4, r5, r6, pc}
> 0x00013fce : str r2, [r5, #0x10]; pop {r3, r4, r5, pc}
> 0x0001543a : str r6, [r5]; mov r0, r6; pop {r3, r4, r5, r6, r7, pc}
> 0x0001765e : str r2, [r1, #4]; bx lr
> 0x00017932 : str ip, [r2, #4]; bx lr
> 0x0001dbd2 : str r0, [r3]; mov r0, r3; bx lr
> 0x0001db5a : strh r5, [r4, r3]; mov r0, r4; pop {r3, r4, r5, pc}
> 0x00016a5e : strh r3, [r2, #4]; mov r0, ip; pop {r4, pc}
> 0x00017b12 : str r0, [r4, #0x10]; mov r0, r4; pop {r3, r4, r5, pc}
> 0x000176ce : str r4, [r1]; str r1, [r4, #4]; pop {r4, r5, r6, pc}
> 0x000177a2 : str r0, [r2]; str r2, [r0, #4]; pop {r4, pc}
> 0x0000df2e : strheq pc, [r3], -r0; ldr r0, [pc]; bx lr
> 0x00017732 : str r4, [ip]; str ip, [r4, #4]; pop {r4, r5, r6, pc}
> 0x0001765a : str r1, [r2]; str r2, [r1, #4]; bx lr
> 0x0000e20a : strh r1, [r3, #2]; mov r0, #1; bx lr
> 0x0001792e : str r2, [ip]; str ip, [r2, #4]; bx lr
> 0x00015412 : str r4, [r5, #4]; str r6, [r5]; add r0, r6, r0; pop {r3, r4, r5, r6, r7, pc}
> 0x0001782e : streq ip, [r0, #8]; str r2, [r3]; str r2, [r3, #4]; mov r0, r3; bx lr
> 0x0002c396 : str r3, [fp, #-0x10]; ldr r3, [fp, #4]; ldr r0, [fp, #-0x40]; ldr r1, [fp, #-0x44]; ldr r2, [fp, #-0x4c]; blx r3