ropshell> use 2ba15e61f3a3df34ed911eccf310ed7e (download)
name         : fact (arm/ELF)
base address : 0x10170
total gadgets: 1857

ropshell> suggest "write mem"
> 0x0005ab8e : strne r3, [r0]; pop {r4, pc}
> 0x0004f166 : str ip, [r1]; pop {r7, pc}
> 0x00028cb2 : str r0, [r2]; pop {r4, pc}
> 0x00058256 : str r3, [r2]; pop {r4, pc}
> 0x0002b25a : str r0, [r3]; pop {r4, pc}
> 0x000496e6 : str r1, [r3]; pop {r4, pc}
> 0x00063ab6 : str r2, [r3]; pop {r4, pc}
> 0x0001151a : str lr, [r3]; pop {r4, r5, r6, r7, pc}
> 0x00049c06 : str r1, [r4]; pop {r4, pc}
> 0x0001d33e : str r3, [r4]; pop {r4, pc}
> 0x0005788e : str r0, [lr]; pop {r4, r5, r6, pc}
> 0x000361be : str r2, [r0, r3]; pop {r4, pc}
> 0x0005b7aa : str lr, [r7, r2]; pop {r4, r5, r6, r7, pc}
> 0x000105e2 : str r1, [r0]; mov r0, r2; pop {r4, pc}
> 0x00054456 : str ip, [r0, #0x184]; pop {r4, pc}
> 0x00028d0a : strge lr, [r1, #4]; pop {r4, pc}
> 0x00049722 : str ip, [r3, #0x20]; pop {r4, pc}
> 0x0006ed4e : str r0, [r4, #0x10]; pop {r4, pc}
> 0x0001dcaa : str r5, [r4, #0x30]; pop {r4, r5, r6, pc}
> 0x000250be : str r0, [r5]; mov r0, r4; pop {r4, r5, r6, pc}
> 0x0001d22a : str r3, [r5, #0x60]; pop {r4, r5, r6, pc}
> 0x00041a02 : str r2, [lr]; blx r3
> 0x00022e32 : str r0, [r1]; str r2, [r3]; pop {r4, r5, pc}
> 0x0005c5e2 : str r1, [r2]; mov r0, #2; pop {r4, r5, pc}
> 0x0005c61e : str r4, [r2]; mov r0, #2; pop {r4, r5, pc}
> 0x0005b74e : str lr, [r4, r2, lsl #2]; pop {r4, r5, r6, pc}
> 0x00011516 : str r0, [ip]; str lr, [r3]; pop {r4, r5, r6, r7, pc}
> 0x0006eea2 : strhlo r2, [r1, r3]; pop {r4, r5}; bx lr
> 0x00019262 : str r2, [r4]; add sp, sp, #0x18; pop {r4, r5, r6, pc}
> 0x00033b82 : str r2, [r5]; add sp, sp, #8; pop {r4, r5, r6, pc}
> 0x00019eea : str ip, [r5]; add sp, sp, #8; pop {r4, r5, r6, pc}
> 0x00026fc2 : str r1, [r6]; add sp, sp, #0x10; pop {r4, r5, r6, pc}
> 0x000387ba : str r2, [fp, #-0x480]; blx r3
> 0x00037dfe : str r4, [fp, #-0x464]; blx r3
> 0x00028cae : str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}
> 0x00058869 : strh r0, [r7, r0]; movs r0, r1; blx lr
> 0x000206a2 : strheq r3, [r7], -r4; cmp r0, #0; bxeq lr
> 0x00064796 : str r4, [r8]; mov r1, r7; mov r0, r8; blx r6
> 0x00022e2e : str lr, [ip]; str r0, [r1]; str r2, [r3]; pop {r4, r5, pc}
> 0x0005785a : strne r4, [r0], #8; strne r0, [r5]; mov r0, r5; pop {r4, r5, r6, pc}
> 0x000160d2 : str r2, [r6]; str r3, [r5]; add sp, sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x000563ba : str r1, [fp, #-0x64]; ldr r0, [r3]; blx r7
> 0x0005ad4a : strheq sl, [r5], -r0; ldr r3, [r0, #4]; cmp r3, r1; bxne lr
> 0x00066451 : strh r4, [r7, #8]; movs r0, r1; vrhadd.u16 d14, d14, d31; blx lr
> 0x0002d9aa : strheq r5, [r7], -r4; tst r1, #0x80; moveq r0, r1; mvnne r0, #0; bx lr
> 0x00028caa : str r3, [lr, #4]; str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}
> 0x000299ee : streq r5, [r3]; strne r0, [r3]; ldr r2, [r4]; str r2, [r3, #4]; pop {r4, r5, r6, pc}
> 0x00057ee2 : str r6, [r4, #0xc]; add r3, r3, #1; str r3, [r4, #8]; pop {r4, r5, r6, pc}
> 0x0005c53a : str r5, [r0], #4; addlo r4, r4, #1; mov r0, r4; pop {r4, r5, r6, r7}; bx lr
> 0x0001b33e : strge ip, [r4, #0xc]; str r3, [r4]; mov r0, r6; mov r1, r7; add sp, sp, #8; pop {r4, r6, r7, pc}
> 0x00011506 : str r7, [r1]; str r1, [r6]; str r2, [r5]; str r2, [r4]; str r0, [ip]; str lr, [r3]; pop {r4, r5, r6, r7, pc}
> 0x0006644d : strh r4, [r5, #8]; movs r0, r1; strh r4, [r7, #8]; movs r0, r1; vrhadd.u16 d14, d14, d31; blx lr
> 0x0001dffa : str r6, [r5, #0xc]; ldr r3, [r5, #8]; add r3, r3, #1; str r3, [r5, #8]; pop {r4, r5, r6, pc}
> 0x00017b12 : str r3, [r6, #4]; ldr r3, [r5, #0x98]; mov r0, r5; ldr r3, [r3, #0x30]; blx r3
> 0x00049712 : str r4, [r3, #0x28]; str r1, [r3, #4]; str r1, [r3]; str lr, [r3, #8]; str ip, [r3, #0x20]; pop {r4, pc}
> 0x00028c9e : str r3, [r1, #8]; ldr r3, [r0, #8]; str r1, [r0, #4]; str r3, [lr, #4]; str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}