ropshell> use 5d959bb15f320bad9400c3d4c4b40089 (download)
name         : libc-2.27.so (arm/ELF)
base address : 0x16d80
total gadgets: 5101

ropshell> suggest "write mem"
> 0x000af45f : str r3, [r0]; pop {r3, pc}
> 0x000bb673 : str r4, [r0]; pop {r3, r4, r5, pc}
> 0x0004bab5 : str r3, [r1]; pop {r4, pc}
> 0x00016dd1 : str r0, [r2]; pop {r4, r5, r6, pc}
> 0x0004c379 : str r3, [r2]; pop {r4, pc}
> 0x000944bb : str r0, [r3]; pop {r3, pc}
> 0x00049ac7 : str r1, [r3]; pop {r4, r5, r6, pc}
> 0x0005845f : str r2, [r3]; pop {r3, pc}
> 0x0009a537 : str r4, [r3]; pop {r4, pc}
> 0x00092fd3 : str r5, [r3]; pop {r4, r5, pc}
> 0x000a07f3 : str r6, [r3]; pop {r4, r5, r6, pc}
> 0x0007b01f : str r0, [r4]; pop {r3, r4, r5, r6, r7, pc}
> 0x00049a39 : str r1, [r4]; pop {r3, r4, r5, pc}
> 0x00088b69 : str r2, [r4]; pop {r4, r5, r6, pc}
> 0x00017ca9 : str r3, [r4]; pop {r3, r4, r5, pc}
> 0x0008f995 : str r5, [r4]; pop {r3, r4, r5, pc}
> 0x00059963 : str r2, [r5]; pop {r3, r4, r5, pc}
> 0x00027665 : str r3, [r5]; pop {r3, r4, r5, pc}
> 0x0008b557 : str r4, [r5]; pop {r3, r4, r5, pc}
> 0x000273b7 : str r6, [r5]; pop {r3, r4, r5, r6, r7, pc}
> 0x000565bf : str r3, [r6]; pop {r4, r5, r6, pc}
> 0x00068277 : str r4, [r6]; pop {r3, r4, r5, r6, r7, pc}
> 0x000176d9 : str r4, [r1, r2]; pop {r4, pc}
> 0x0002458d : str r1, [r2, r3]; pop {r3, pc}
> 0x0004068f : str r6, [r2, r5]; pop {r4, r5, r6, pc}
> 0x00090427 : str r6, [r4, r3]; pop {r4, r5, r6, pc}
> 0x000af441 : str r5, [r0, #8]; pop {r3, r4, r5, pc}
> 0x0007b053 : str r6, [r0]; mov r0, r5; pop {r4, r5, r6, pc}
> 0x000ba46d : str r0, [r6, #0x18]; pop {r3, r4, r5, r6, r7, pc}
> 0x000908a9 : str r0, [r7, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x000b286f : str r2, [r7]; blx r3
> 0x0006780d : str.w r4, [r8]; blx r7
> 0x0005d18f : str r5, [r2]; pop {r4, r5}; bx lr
> 0x00033a0d : str r1, [r7, #0x30]; bx r0
> 0x00033b3d : str r3, [r7, #0x54]; bx r0
> 0x0002fc83 : str.w r5, [r7, r4, lsl #2]; pop {r4, r5, r6, r7, pc}
> 0x000a5937 : str r7, [r5, r3]; add sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x0008f969 : str r7, [r6, #0x24]; mov r0, r4; pop {r3, r4, r5, r6, r7, pc}
> 0x000a0f23 : str.w r6, [r7, #0xd8]; blx r5
> 0x0002e76d : str r1, [r0, #0x50]; str r3, [r2]; pop {r4, r5, r6, pc}
> 0x00074a27 : strh r7, [r1, #6]; add sp, #0xd0; pop {r4, r5, r6, pc}
> 0x0005d24b : str r4, [r7]; pop {r4, r5, r6, r7}; bx lr
> 0x000be331 : str r0, [r1]; movs r0, #0; add sp, #0x10; pop {r4, pc}
> 0x000be889 : str r0, [r5]; mov.w r0, #-1; add sp, #0xc; pop {r4, r5, r6, r7, pc}
> 0x0007bfbb : str r2, [r1, #0xc]; str r3, [r1, #0x1c]; pop {r3, r4, r5, pc}
> 0x0005118b : str r7, [r4, #8]; str.w r3, [r4, #0xa0]; pop {r3, r4, r5, r6, r7, pc}
> 0x000af1e7 : str r4, [r2, r3]; str r1, [r4, #0x10]; mov r0, r4; pop {r3, r4, r5, pc}
> 0x000af4dd : str.w r2, [r6, r5, lsl #2]; str r3, [r4, #0xc]; pop {r4, r5, r6, pc}
> 0x0004a157 : str r7, [r3, #4]; movs r3, #0; str.w r3, [r6, #0xa0]; pop {r3, r4, r5, r6, r7, pc}
> 0x0008b5cf : str r6, [r1, r2]; str r5, [r7, #4]; str r3, [r4, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x000b7a33 : str r1, [r6, #0x24]; ldr r3, [r2, r3]; str r3, [r6, #0x28]; pop {r3, r4, r5, r6, r7, pc}
> 0x0005729f : str r2, [r0, #0x60]; str r3, [r4, #0x10]; str r1, [r4, #4]; pop {r4, r5, r6, pc}
> 0x0008b687 : str.w ip, [r7, r2]; strd r5, r6, [r1, #4]; str r3, [r4, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x00027729 : strh.w ip, [r1, #0xc]; strd r4, r6, [r1, #0x10]; pop {r4, r5, r6, r7}; bx lr
> 0x00040ee5 : strh r5, [r1, #0x3c]; adr r2, #8; ldr.w r3, [r2, r3, lsl #2]; add r2, r3; bx r2
> 0x000508b1 : strh r7, [r0, #4]; movs r2, #0; ldr r3, [r3, #0x2c]; mov r1, r2; mov r0, r4; blx r3
> 0x0009a5d1 : str.w r3, [ip, r0, lsl #2]; ldr r3, [pc, #0x78]; movs r2, #0; add r3, pc; str r2, [r3]; pop {r4, r5, r6, r7, pc}
> 0x0004e691 : strh r7, [r2, #8]; movs r1, #0; mov r0, sl; str r1, [sp]; ldr.w r1, [ip, #0x40]; blx r1
> 0x00057417 : str r1, [r5, #4]; add r3, pc; ldr r3, [r3]; movs r1, #0xc; movs r0, #0; str r1, [r2, r3]; pop {r4, r5, r6, pc}