ropshell> use c8fda672a793b2a9a22e7acb1e1a02fb (download)
name         : libc.so (arm/ELF)
base address : 0xc9e0
total gadgets: 1959
ropshell> suggest "write mem"
> 0x0001ec55 : str r3, [r0]; pop {r4, pc}
> 0x00032323 : str r4, [r0]; pop {r3, r4, r5, r6, r7, pc}
> 0x0002c1a1 : str r2, [r1]; pop {r3, pc}
> 0x00026739 : str r4, [r1]; pop {r4, r5, r6, r7, pc}
> 0x0002561b : str r0, [r2]; pop {r4, r5, r6, r7, pc}
> 0x0002e6f7 : str r3, [r2]; pop {r3, r4, r5, r6, r7, pc}
> 0x00025b47 : str r4, [r3]; pop {r4, r5, pc}
> 0x0002558d : str r5, [r3]; pop {r4, r5, r6, r7, pc}
> 0x0001d0ff : str r0, [r4]; pop {r2, r3, r4, pc}
> 0x0001eb75 : str r2, [r4]; pop {r4, pc}
> 0x00026797 : str r3, [r4]; pop {r2, r3, r4, pc}
> 0x00022ef5 : str r5, [r4]; pop {r3, r4, r5, pc}
> 0x0001e991 : str r3, [r5]; pop {r3, r4, r5, pc}
> 0x00025099 : str r5, [r6]; pop {r3, r4, r5, r6, r7, pc}
> 0x0003a89a : streq r1, [r2]; bx lr
> 0x0000d6be : str r1, [r3]; bx lr
> 0x00022d07 : str r1, [r0, #0x10]; pop {r4, pc}
> 0x0001a806 : str r2, [r0]; mov r0, r3; pop {r4, r5, r6, pc}
> 0x0000d572 : str r5, [r0]; mov r0, r7; pop {r3, r4, r5, r6, r7, pc}
> 0x0002a72d : str r6, [r0]; mov r0, r4; pop {r4, r5, r6, pc}
> 0x00016a0d : str r7, [r0, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x00012cad : str r0, [r1, #0xc]; pop {r3, r4, r5, r6, r7, pc}
> 0x0001aa69 : str r4, [r2]; blx r3
> 0x00025c83 : str r5, [r2]; mov r0, ip; pop {r4, r5, r6, r7, pc}
> 0x000130c1 : str r2, [r3, #0x34]; pop {r1, r2, r3, r4, r5, r6, r7, pc}
> 0x00026829 : str r1, [r4, #0x10]; pop {r4, pc}
> 0x0002e649 : str r6, [r4, #0x30]; pop {r4, r5, r6, pc}
> 0x00027b51 : str r4, [r5, #0x28]; pop {r3, r4, r5, r6, r7, pc}
> 0x000301bd : str r6, [r5]; mov r0, r4; pop {r2, r3, r4, r5, r6, pc}
> 0x0000d586 : str r0, [r6]; mov r0, r7; pop {r3, r4, r5, r6, r7, pc}
> 0x00030fdb : str r1, [r6]; uxth r0, r5; pop {r1, r2, r3, r4, r5, r6, r7, pc}
> 0x0001ab07 : str r0, [r3]; movs r0, #0; pop {r4, pc}
> 0x00030127 : str r3, [r6]; ldr r0, [r4]; pop {r4, r5, r6, pc}
> 0x000297e5 : str.w r1, [ip]; add sp, #0x80; pop {r4, pc}
> 0x0001f9dd : str r3, [r1, #4]; mov r0, r3; pop {r4, pc}
> 0x0000d44e : str ip, [r1]; str r3, [r2]; bx lr
> 0x00030179 : str r4, [r6]; mov r4, r5; mov r0, r4; pop {r2, r3, r4, r5, r6, pc}
> 0x000127d5 : str.w r5, [ip, #0xc]; movs r0, #1; pop {r3, r4, r5, pc}
> 0x000328d5 : str r0, [r7, #0x18]; add r2, sp, #0x70; blx r6
> 0x0000cdcd : strh.w lr, [r7, #3]; movs r0, #8; add r1, sp, #0x70; blx r3
> 0x0000f0ff : str.w r3, [ip, #4]; ldr r1, [r2, #0x10]; str r1, [r0, #0x1c]; pop {r4, pc}
> 0x0002ea9d : strh r1, [r7, #0xa]; ldr r0, [sp, #0x5c]; ldr r3, [sp, #0x20]; blx r3
> 0x00033239 : str r4, [r7, #0x18]; ldr r0, [sp, #0x80]; ldr r2, [sp, #0x70]; blx r6
> 0x00028625 : strh r5, [r7, #0x20]; adr r1, #8; ldr.w ip, [r1, r3, lsl #2]; add r1, ip; bx r1
> 0x000223e7 : strh.w ip, [r3, #2]; ldr r3, [pc, #0x14]; add r3, pc; ldr r3, [r3]; strh r1, [r3]; bx lr