ropshell> use 8e858af73d51196f82ac50f541148b0a (download)
name         : fact (arm/ELF)
base address : 0x10170
total gadgets: 1863

ropshell> suggest "write mem"
> 0x0005ab3e : strne r3, [r0]; pop {r4, pc}
> 0x0004f116 : str ip, [r1]; pop {r7, pc}
> 0x00028ac2 : str r0, [r2]; pop {r4, pc}
> 0x00058206 : str r3, [r2]; pop {r4, pc}
> 0x0002b06a : str r0, [r3]; pop {r4, pc}
> 0x0004968e : str r1, [r3]; pop {r4, pc}
> 0x00063a66 : str r2, [r3]; pop {r4, pc}
> 0x00011526 : str lr, [r3]; pop {r4, r5, r6, r7, pc}
> 0x00049bae : str r1, [r4]; pop {r4, pc}
> 0x0001d152 : str r3, [r4]; pop {r4, pc}
> 0x0005783e : str r0, [lr]; pop {r4, r5, r6, pc}
> 0x00035fce : str r2, [r0, r3]; pop {r4, pc}
> 0x0005b75a : str lr, [r7, r2]; pop {r4, r5, r6, r7, pc}
> 0x000105e2 : str r1, [r0]; mov r0, r2; pop {r4, pc}
> 0x00054406 : str ip, [r0, #0x184]; pop {r4, pc}
> 0x00028b1a : strge lr, [r1, #4]; pop {r4, pc}
> 0x000496ca : str ip, [r3, #0x20]; pop {r4, pc}
> 0x0006ecfe : str r0, [r4, #0x10]; pop {r4, pc}
> 0x0001dabe : str r5, [r4, #0x30]; pop {r4, r5, r6, pc}
> 0x00024ed2 : str r0, [r5]; mov r0, r4; pop {r4, r5, r6, pc}
> 0x0001d03e : str r3, [r5, #0x60]; pop {r4, r5, r6, pc}
> 0x00041812 : str r2, [lr]; blx r3
> 0x00022c46 : str r0, [r1]; str r2, [r3]; pop {r4, r5, pc}
> 0x0005c592 : str r1, [r2]; mov r0, #2; pop {r4, r5, pc}
> 0x0005c5ce : str r4, [r2]; mov r0, #2; pop {r4, r5, pc}
> 0x0005b6fe : str lr, [r4, r2, lsl #2]; pop {r4, r5, r6, pc}
> 0x00011522 : str r0, [ip]; str lr, [r3]; pop {r4, r5, r6, r7, pc}
> 0x0006ee52 : strhlo r2, [r1, r3]; pop {r4, r5}; bx lr
> 0x00019076 : str r2, [r4]; add sp, sp, #0x18; pop {r4, r5, r6, pc}
> 0x00033992 : str r2, [r5]; add sp, sp, #8; pop {r4, r5, r6, pc}
> 0x00019cfe : str ip, [r5]; add sp, sp, #8; pop {r4, r5, r6, pc}
> 0x00026dd2 : str r1, [r6]; add sp, sp, #0x10; pop {r4, r5, r6, pc}
> 0x000385ca : str r2, [fp, #-0x480]; blx r3
> 0x00037c0e : str r4, [fp, #-0x464]; blx r3
> 0x00028abe : str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}
> 0x000297c6 : strheq r0, [sl], -ip; cmp r1, #0; bxeq lr
> 0x00064746 : str r4, [r8]; mov r1, r7; mov r0, r8; blx r6
> 0x00022c42 : str lr, [ip]; str r0, [r1]; str r2, [r3]; pop {r4, r5, pc}
> 0x0005780a : strne r4, [r0], #8; strne r0, [r5]; mov r0, r5; pop {r4, r5, r6, pc}
> 0x000160e2 : str r2, [r6]; str r3, [r5]; add sp, sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x0005636a : str r1, [fp, #-0x64]; ldr r0, [r3]; blx r7
> 0x00066401 : strh r4, [r5, #8]; movs r0, r1; vrhadd.u16 d14, d14, d31; blx lr
> 0x00028aba : str r3, [lr, #4]; str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}
> 0x000297fe : streq r5, [r3]; strne r0, [r3]; ldr r2, [r4]; str r2, [r3, #4]; pop {r4, r5, r6, pc}
> 0x00057e92 : str r6, [r4, #0xc]; add r3, r3, #1; str r3, [r4, #8]; pop {r4, r5, r6, pc}
> 0x00021ee9 : strh r0, [r6, #0xe]; pop.w {sl, ip, sp}; adds r0, #0x61; and.w sl, r0, r0; pop {r0, r1, r2, r4, r6, r7, pc}
> 0x0005c4ea : str r5, [r0], #4; addlo r4, r4, #1; mov r0, r4; pop {r4, r5, r6, r7}; bx lr
> 0x0001b152 : strge ip, [r4, #0xc]; str r3, [r4]; mov r0, r6; mov r1, r7; add sp, sp, #8; pop {r4, r6, r7, pc}
> 0x00011512 : str r7, [r1]; str r1, [r6]; str r2, [r5]; str r2, [r4]; str r0, [ip]; str lr, [r3]; pop {r4, r5, r6, r7, pc}
> 0x0001de0e : str r6, [r5, #0xc]; ldr r3, [r5, #8]; add r3, r3, #1; str r3, [r5, #8]; pop {r4, r5, r6, pc}
> 0x00017b22 : str r3, [r6, #4]; ldr r3, [r5, #0x98]; mov r0, r5; ldr r3, [r3, #0x30]; blx r3
> 0x00058811 : strh r4, [r1, r0]; movs r0, r1; strh r0, [r3, r2]; movs r0, r1; strh r0, [r5, r0]; movs r0, r1; blx lr
> 0x000496ba : str r4, [r3, #0x28]; str r1, [r3, #4]; str r1, [r3]; str lr, [r3, #8]; str ip, [r3, #0x20]; pop {r4, pc}
> 0x00028aae : str r3, [r1, #8]; ldr r3, [r0, #8]; str r1, [r0, #4]; str r3, [lr, #4]; str lr, [r0, #8]; str r0, [r2]; pop {r4, pc}