ropshell> use 6a9ba29fad2b9881c33763e895caeb98 (download)
name         : libc.so (arm/ELF)
base address : 0x163b0
total gadgets: 2598

ropshell> suggest "write mem"
> 0x0001c0a3 : str r1, [r0]; pop {r4, pc}
> 0x000180d7 : str r2, [r0]; pop {r0, r4, r5, pc}
> 0x0001810f : strh r3, [r0]; pop {r0, r4, r5, pc}
> 0x0006fe0d : str r4, [r0]; pop {r4, pc}
> 0x0003f195 : str r5, [r0]; pop {r4, r5, r7, pc}
> 0x00059957 : str r0, [r1]; pop {r7, pc}
> 0x0003b907 : str r4, [r1]; pop {r4, pc}
> 0x0003001b : str r0, [r2]; pop {r4, r5, r7, pc}
> 0x00030041 : str r1, [r2]; pop {r4, r5, r7, pc}
> 0x00028aad : str r0, [r4]; pop {r4, pc}
> 0x00036f81 : str r1, [r4]; pop {r4, pc}
> 0x00019663 : str r6, [r5]; pop {r4, r5, r6, pc}
> 0x00046caf : str.w r1, [ip]; pop {r4, r5, r7, pc}
> 0x0002fef3 : str.w r1, [lr]; pop {r4, pc}
> 0x0002e44b : str r6, [r1, r0]; pop {r7, pc}
> 0x0001ef2d : str r1, [r3]; bx lr
> 0x00038e79 : strh.w r0, [ip]; bx lr
> 0x00034e07 : str.w r3, [ip]; bx lr
> 0x0004f8d1 : str r2, [r1, #0x24]; pop {r4, r5, r7, pc}
> 0x0005a7c9 : str r0, [r3]; mov r0, r4; pop {r4, pc}
> 0x000630a1 : str r5, [r4, #0x1c]; pop {r4, r5, r7, pc}
> 0x0004b2e9 : str r1, [r5, #0x28]; pop {r4, r5, r6, pc}
> 0x00038e33 : strh.w r0, [lr]; mov r0, ip; pop {r7, pc}
> 0x0003643f : str.w r6, [r0, r4, lsl #2]; pop {r4, r5, r6, pc}
> 0x000323cd : str.w ip, [r0]; movs r0, #1; pop {r7, pc}
> 0x00021e43 : str.w lr, [r0]; movs r0, #0; pop {r4, pc}
> 0x0004ea33 : str.w ip, [r1]; movs r0, #1; pop {r4, r5, r6, r7, pc}
> 0x00047fa5 : str r7, [r4]; add sp, #4; pop {r4, r5, r6, r7, pc}
> 0x0002b11f : str r0, [r5]; ldr r0, [r4]; pop {r4, r5, r6, pc}
> 0x00047e09 : str.w r8, [r1, #0x78]; blx r2
> 0x00047e0b : strh r0, [r7, #2]; blx r2
> 0x00046b11 : str r6, [r4]; mov r0, r5; add sp, #4; pop {r4, r5, r6, r7, pc}
> 0x0001a771 : str r7, [r6]; mov r0, r4; add sp, #4; pop {r4, r5, r6, r7, pc}
> 0x0004b17b : str r7, [r0]; movs r0, #0; add sp, #4; pop {r4, r5, r6, r7, pc}
> 0x0003ecd3 : str r3, [r2]; ldr r0, [r0, #0xc]; bx lr
> 0x0006fd81 : str r3, [r4]; str r0, [r2]; movs r0, #0; pop {r4, r5, r7, pc}
> 0x0002fe53 : str.w r2, [ip]; asrs r0, r0, #2; add r0, r5; pop {r4, r5, r7, pc}
> 0x00051253 : str r0, [r6, #0x1c]; mov r0, r4; add sp, #4; pop {r4, r5, r6, r7, pc}
> 0x0001a90f : str r7, [r3, r4]; orrs r0, r1; mov.w r0, #2; it eq; movs r0, #1; bx lr
> 0x0004704f : str r3, [r1]; ldr r0, [r0, #8]; str r0, [r2]; movs r0, #0; bx lr
> 0x00069409 : str r2, [r3, #0x10]; movs r2, r0; ldr r0, [pc, #4]; add r0, pc; ldr r0, [r0]; bx lr
> 0x00072d1a : str r3, [r5, #0x14]; mov r0, #1; ldr r3, [r5, #0x10]; mov r1, r5; mov r2, r4; blx r3
> 0x00035aa9 : str r1, [r6, #0x14]; ldr r1, [r6, #0xc]; orr.w r2, r4, r5; str.w r2, [r1, r0, lsl #2]; pop {r4, r5, r6, pc}
> 0x0005359f : str r2, [r4, #4]; ldr r0, [r0, #0x74]; add r0, r1; ldr r1, [r0, #0x10]; adds r1, #1; str r1, [r0, #0x10]; pop {r4, pc}