ropshell> use 35a3115eb9749638fd5e19c26c7fa752 (download)
name         : httpd (arm/ELF)
base address : 0xf9b0
total gadgets: 780

ropshell> suggest "write mem"
> 0x000cf216 : str r3, [r4]; pop {r3, r4, r5, pc}
> 0x000d585e : str r2, [r5]; pop {r4, r5, r6, pc}
> 0x000cec4e : str r3, [r0]; bx lr
> 0x000cf3b6 : str r2, [r1]; bx lr
> 0x000c927a : str r3, [r1]; bx lr
> 0x000d19d6 : str r2, [r4, #4]; pop {r4, pc}
> 0x000d79e6 : str r0, [r5, #0x30c]; pop {r3, r4, r5, pc}
> 0x000d1b6a : str r3, [r5, #8]; pop {r4, r5, r6, pc}
> 0x000d1cc6 : str r6, [r5, #8]; pop {r3, r4, r5, r6, r7, pc}
> 0x000c9282 : str r1, [r0, #0x890]; bx lr
> 0x000c92a6 : strne r2, [r0, #0x1a0]; bx lr
> 0x000cf212 : str r5, [r2]; str r3, [r4]; pop {r3, r4, r5, pc}
> 0x000d00ce : str r4, [r3, r5, lsl #2]; pop {r3, r4, r5, r6, r7, pc}
> 0x000cf50e : str r6, [r2]; pop {r4, r5, r6}; bx lr
> 0x000d87da : str ip, [r2]; pop {r4, r5, r6}; bx lr
> 0x000d80da : strgt r2, [r3]; movle r0, #3; bx lr
> 0x000cee9e : str r1, [r4]; str r3, [r4, #8]; pop {r4, r5, r6, pc}
> 0x000d5896 : strlt r0, [r4]; movge r0, #0; strge r3, [r4]; pop {r3, r4, r5, pc}
> 0x000d1cc2 : str r6, [r4, #8]; str r6, [r5, #8]; pop {r3, r4, r5, r6, r7, pc}
> 0x000125fa : str r0, [fp, #-8]; add sp, fp, #0; ldm sp!, {fp}; bx lr
> 0x00010bbe : str r1, [fp, #-0xc]; add sp, fp, #0; ldm sp!, {fp}; bx lr
> 0x000d87d2 : str r4, [r0]; mov r0, #0; str ip, [r2]; pop {r4, r5, r6}; bx lr
> 0x000d79de : str r3, [r2, #4]; mov r0, #0; str r0, [r5, #0x30c]; pop {r3, r4, r5, pc}
> 0x0003b6e6 : str r3, [fp, #-0x14]; mov r3, #1; mov r0, r3; add sp, fp, #0; ldm sp!, {fp}; bx lr
> 0x0003b6e2 : str r2, [fp, #-0x10]; str r3, [fp, #-0x14]; mov r3, #1; mov r0, r3; add sp, fp, #0; ldm sp!, {fp}; bx lr
> 0x000d22d6 : str ip, [r4, #8]; str r0, [r4, #0xc]; str r1, [r4, #0x10]; strd r2, r3, [r4]; add sp, sp, #8; pop {r4, pc}