ropshell> use 83ea1bf2efba6d13bc0f10c265545cc1 (download)
name         : beg (arm/ELF)
base address : 0x10180
total gadgets: 2145

ropshell> suggest "write mem"
> 0x0004515d : str r3, [r0]; pop {r3, pc}
> 0x00042ae7 : str r0, [r2]; pop {r3, r4, r5, r6, r7, pc}
> 0x00043d0b : str r3, [r2]; pop {r3, r4, r5, r6, r7, pc}
> 0x0003c895 : str r5, [r2]; pop {r4, r5, pc}
> 0x0002525b : str r0, [r3]; pop {r4, pc}
> 0x00038f11 : str r1, [r3]; pop {r4, r5, r6, pc}
> 0x000468df : str r2, [r3]; pop {r3, pc}
> 0x00038e1d : str r1, [r4]; pop {r3, r4, r5, pc}
> 0x00019733 : str r3, [r4]; pop {r3, r4, r5, pc}
> 0x00042ac9 : str r3, [r5]; pop {r3, r4, r5, pc}
> 0x000236cd : str r3, [r1, r2]; pop {r4, r5, pc}
> 0x0004db7f : str r1, [r2, r3]; pop {r3, r4, r5, r6, r7, pc}
> 0x00045787 : str r2, [r4, r0]; pop {r4, r5, r6, r7, pc}
> 0x000148e3 : strh.w fp, [r4, r3]; pop {r4, r5, pc}
> 0x00033f89 : str r6, [r0]; mov r0, r3; pop {r4, r5, r6, r7, pc}
> 0x00033f47 : str.w lr, [r0]; mov r0, r3; pop {r4, r5, r6, r7, pc}
> 0x0004dadf : str r0, [r4, #0x10]; pop {r4, pc}
> 0x000192b7 : str r5, [r4, #0x20]; pop {r4, r5, r6, pc}
> 0x00019559 : str r6, [r4, #0x20]; pop {r4, r5, r6, pc}
> 0x0004dba3 : str r7, [r5, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x0001efc3 : str r0, [r6]; mov r0, r4; pop {r4, r5, r6, pc}
> 0x0001d89f : str r4, [r6, #0x14]; pop {r4, r5, r6, r7, pc}
> 0x00010601 : str r5, [r6, #4]; pop {r4, r5, r6, pc}
> 0x00047099 : str.w r4, [r8]; blx r7
> 0x00039d9f : str r1, [r0, #8]; bx lr
> 0x000543dd : str r5, [r1]; pop {r4, r5}; bx lr
> 0x00014043 : str r2, [r5]; add sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x0003a9c1 : str r4, [r5]; add sp, #0x24; pop {r4, r5, r6, r7, pc}
> 0x00021803 : str r1, [r6]; add sp, #0x10; pop {r4, r5, r6, pc}
> 0x00035cc9 : str r3, [r7, #0x48]; bx r1
> 0x00052bb9 : str r6, [r7]; add sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x00045785 : str.w r5, [lr, r2, lsl #2]; pop {r4, r5, r6, r7, pc}
> 0x00024239 : str r4, [r2, r3]; add sp, #8; pop {r4, pc}
> 0x00018421 : str r7, [r6, r3]; add sp, #0xc; pop {r4, r5, r6, r7, pc}
> 0x00042ac5 : str r4, [r3], #8; str r3, [r5]; pop {r3, r4, r5, pc}
> 0x00039573 : str r7, [r4, #4]; add sp, #0xc; pop {r4, r5, r6, r7, pc}
> 0x0004508f : str r0, [r5, #8]; add sp, #0x20; pop {r4, r5, r6, pc}
> 0x00014041 : str r3, [r6]; str r2, [r5]; add sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x00040495 : str.w r2, [r0, #0x18c]; str.w r3, [r0, #0x188]; pop {r3, r4, r5, pc}
> 0x00040479 : str.w r4, [r0, #0x180]; str.w r3, [r0, #0x184]; pop {r3, r4, r5, pc}
> 0x00044f67 : str r7, [r1, r0]; ldr r1, [r0, #4]; bx r1
> 0x0003af33 : str r1, [r5, #0x24]; str r3, [r5, #0x28]; pop {r3, r4, r5, r6, r7, pc}
> 0x00034873 : str r1, [r7, #0x10]; ldr r1, [r7, #0x48]; bx r3
> 0x0002e5cb : str r2, [r7, #0x40]; ldr r2, [r7, #0x44]; bx r3
> 0x00023895 : str r5, [r0, #8]; str r0, [r2]; pop {r4, r5, r6, r7}; bx lr
> 0x00026097 : strh.w fp, [r6, #0x910]; ldr r0, [sp, #4]; add sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x000468d7 : str r0, [r7, #0x3c]; movt r3, #7; adds r2, r3, #4; str r2, [r3]; pop {r3, pc}
> 0x0002d0d1 : strh r6, [r3, #6]; mov r2, r5; mov r1, r4; ldr r0, [sp, #4]; blx fp
> 0x0002fa09 : strh r7, [r0, #0xc]; ldr r3, [r3, #0x1c]; mov r1, r5; mov r2, r4; mov r0, r8; blx r3
> 0x00016177 : strh r4, [r1, #0x14]; ldr r3, [r3, #0x48]; add r1, sp, #0x38; mov r0, r4; blx r3
> 0x00034e93 : strh r4, [r7, #0x24]; ldr r3, [r6, #0x1c]; mov r2, r4; mov r1, r8; mov r0, fp; blx r3
> 0x00035f45 : strh r5, [r7, #8]; ldr.w r3, [fp, #0x1c]; mov r2, r5; mov r1, r4; mov r0, sb; blx r3
> 0x00017591 : strh r7, [r2, #4]; movs r1, #0; mov r0, r4; str r1, [sp]; ldr r1, [r5, #0x40]; blx r1
> 0x0003a9b9 : str r0, [r1, #0x14]; ldr r3, [sp, #0x1c]; movs r0, #1; add r4, r3; str r4, [r5]; add sp, #0x24; pop {r4, r5, r6, r7, pc}
> 0x00038adf : str r5, [r3, #0x28]; str r4, [r3, #0x20]; str r1, [r3, #8]; str r1, [r3]; pop {r4, r5, r6}; bx lr