ropshell> use 9a31da11f4ba31123a7487f3f2676af5 (download) name : libthread_db-1.0.so (arm/ELF) base address : 0x1430 total gadgets: 211
ropshell> suggest "write mem" > 0x00001876 : str r3, [r5]; pop {r4, r5, r6, pc} > 0x00005b83 : str r2, [r3]; bx lr > 0x00004b8a : str r3, [r2]; add sp, sp, #8; pop {r4, pc} > 0x00004886 : strne r3, [r4]; add sp, sp, #0xc; pop {r4, r5, pc} > 0x000050f1 : str r7, [r4, #0x14]; blx r3 > 0x00002772 : str r0, [r5]; add sp, sp, #0x14; pop {r4, r5, pc} > 0x000047ee : str lr, [r5]; add sp, sp, #0x10; pop {r4, r5, r6, pc} > 0x000048ea : str r3, [r7]; add sp, sp, #0xc; pop {r4, r5, r6, r7, pc} > 0x00001ee6 : str r4, [fp, #-0x2c]; blx r3 > 0x00001676 : str r0, [r3]; mov r0, r5; add sp, sp, #0x14; pop {r4, r5, r6, r7, pc} > 0x00005043 : str r0, [r4, #0x10]; ite ne; movne r0, #0; moveq r0, #9; add sp, #8; pop {r4, r5, r6, pc} > 0x00005181 : strh r4, [r0]; str r4, [sp]; str r0, [r4, #0x44]; movs r0, #1; blx r7 > 0x00001eda : str r3, [fp, #-0x44]; mov r1, r7; ldr r3, [fp, #-0x40]; str r4, [fp, #-0x2c]; blx r3