ropshell> use f4614db96ff7f7d8edbe59340f4535da (download)
name         : mtower_s.elf (arm/ELF)
base address : 0x10000
total gadgets: 565

ropshell> suggest "write mem"
> 0x00010569 : str r0, [r3]; pop {r4, pc}
> 0x0001400b : strh.w r2, [lr]; pop {r4, pc}
> 0x0001b477 : str r1, [r3]; bx lr
> 0x0001b5bb : str r3, [r0, #0x10]; pop {r4, pc}
> 0x0001047b : str r3, [r1, #0x10]; pop {r4, pc}
> 0x0001044d : str r2, [r3, #0xc]; pop {r4, pc}
> 0x00012351 : str r3, [r4, #0x1c]; pop {r4, pc}
> 0x000128bd : str r6, [r4, #8]; pop {r3, r4, r5, r6, r7, pc}
> 0x00012b25 : str r3, [r2]; movs r0, #0; pop {r4, pc}
> 0x0001b2bd : str r3, [r5]; add sp, #0x40; pop {r4, r5, r6, pc}
> 0x0001b475 : str r2, [r1]; str r1, [r3]; bx lr
> 0x0001388b : strh.w fp, [r3, #0x108]; add sp, #0x10; pop {r4, pc}
> 0x0001b5b9 : str r4, [r0, #0x14]; str r3, [r0, #0x10]; pop {r4, pc}
> 0x000128bb : str r7, [r4, #4]; str r6, [r4, #8]; pop {r3, r4, r5, r6, r7, pc}
> 0x0001e947 : str r2, [r0]; str r3, [r0, #4]; movs r0, #0; bx lr
> 0x0001bc87 : str r0, [r4, #0x50]; orrs r3, r2; strh r3, [r4, #0xc]; pop {r4, r5, r6, pc}
> 0x0001b2b7 : str r3, [r6]; movw r3, #0x400; str r3, [r5]; add sp, #0x40; pop {r4, r5, r6, pc}
> 0x00010449 : str r1, [r2, #0x2c]; movs r2, #8; str r2, [r3, #0xc]; pop {r4, pc}
> 0x000128b9 : str r5, [r4]; str r7, [r4, #4]; str r6, [r4, #8]; pop {r3, r4, r5, r6, r7, pc}
> 0x00012f15 : strh r4, [r2, r0]; movt r2, #2; mov ip, r2; add r3, ip; ldr r3, [r3, #0x10]; blx r3
> 0x0001498b : str r4, [r7]; ldr r3, [r3, #0x10]; ldr r3, [r3]; movs r2, r6; ldr r1, [sp, #0x28]; movs r0, r4; blx r3
> 0x00014a7d : str r1, [r0, #0x14]; movs r2, #0; str r2, [r3]; str r2, [r3, #4]; str r2, [r3, #8]; movs r0, r4; pop {r4, pc}