ropshell> use ba9eca779d087e18484ad6598e7e328e (download)
name         : libc.so.6 (arm/ELF)
base address : 0x15f40
total gadgets: 5455
ropshell> suggest "write mem"
> 0x000b246b : str r4, [r0]; pop {r3, r4, r5, pc}
> 0x00049bc5 : str r3, [r1]; pop {r4, pc}
> 0x000ab6e9 : str r3, [r2]; pop {r3, r4, r5, pc}
> 0x00046dd1 : str r5, [r2]; pop {r3, r4, r5, pc}
> 0x000372d1 : str r6, [r2]; pop {r3, r4, r5, r6, r7, pc}
> 0x0008f0cf : str r0, [r3]; pop {r3, pc}
> 0x00047de7 : str r1, [r3]; pop {r4, pc}
> 0x00055b41 : str r2, [r3]; pop {r3, pc}
> 0x000949bf : str r4, [r3]; pop {r4, pc}
> 0x0008e051 : str r6, [r3]; pop {r4, r5, r6, pc}
> 0x000776f7 : str r0, [r4]; pop {r3, r4, r5, r6, r7, pc}
> 0x00047f21 : str r1, [r4]; pop {r3, r4, r5, pc}
> 0x000845a9 : str r2, [r4]; pop {r3, r4, r5, r6, r7, pc}
> 0x000179d3 : str r3, [r4]; pop {r3, r4, r5, pc}
> 0x0008aaa1 : str r5, [r4]; pop {r3, r4, r5, pc}
> 0x00026ce9 : str r3, [r5]; pop {r3, r4, r5, pc}
> 0x00086e3b : str r4, [r5]; pop {r3, r4, r5, pc}
> 0x00026aef : str r6, [r5]; pop {r3, r4, r5, r6, r7, pc}
> 0x000540db : str r3, [r6]; pop {r4, r5, r6, pc}
> 0x00058487 : str r4, [r6]; pop {r3, r4, r5, r6, r7, pc}
> 0x000b048f : str r3, [r7]; pop {r3, r4, r5, r6, r7, pc}
> 0x00024065 : str r2, [r0]; bx lr
> 0x000173fd : str r4, [r1, r2]; pop {r4, pc}
> 0x0003ee8b : str r5, [r1, r2]; pop {r3, r4, r5, r6, r7, pc}
> 0x00023f9b : str r1, [r2, r3]; pop {r3, pc}
> 0x0008b50f : str r6, [r4, r3]; pop {r4, r5, r6, pc}
> 0x000b0399 : str r0, [r5, r3]; pop {r3, r4, r5, pc}
> 0x00016043 : str r1, [r0]; mov r0, r3; pop {r4, r5, r6, r7, pc}
> 0x000572c9 : str r3, [r0, #0x10]; pop {r4, r5, r6, r7, pc}
> 0x0007775b : str r5, [r0]; mov r0, r6; pop {r4, r5, r6, pc}
> 0x000add23 : str r2, [r5, #0x2c]; pop {r3, r4, r5, r6, r7, pc}
> 0x00054ed7 : str r7, [r5, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x00056409 : str r0, [r6]; mov r0, r4; pop {r4, r5, r6, pc}
> 0x0008aa77 : str r7, [r6, #0x24]; pop {r3, r4, r5, r6, r7, pc}
> 0x0008b98b : str r0, [r7, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x00015f8f : str r4, [r2]; str r0, [r3]; pop {r4, r5, r6, pc}
> 0x00077577 : str.w r5, [r3, r1, lsl #2]; pop {r3, r4, r5, pc}
> 0x00063a2f : str r1, [r6]; add sp, #0x10; pop {r4, r5, r6, pc}
> 0x00038fdf : str r1, [r7, #0x4c]; bx r2
> 0x00032735 : str r2, [r7, #0x50]; bx r3
> 0x0002c1d3 : str r6, [r7]; add sp, #0x14; pop {r4, r5, r6, r7, pc}
> 0x0002ef55 : str.w r5, [lr, r2, lsl #2]; pop {r4, r5, r6, r7, pc}
> 0x000a4645 : str.w ip, [r2, r3]; add sp, #0x24; pop {r4, r5, r6, r7, pc}
> 0x000a7835 : str r5, [r6, #0x2c]; mov r0, r4; pop {r4, r5, r6, pc}
> 0x0006ff9b : str r4, [r7, r3]; add sp, #0x7c; pop {r4, r5, r6, r7, pc}
> 0x0009aff9 : str.w r5, [r7, #0xcc]; blx r3
> 0x00054e23 : str r7, [r4, #4]; add sp, #0xc; pop {r4, r5, r6, r7, pc}
> 0x00024937 : str r2, [r6, #8]; add sp, #0x11c; pop {r4, r5, r6, r7, pc}
> 0x0009e7e1 : str r0, [r1]; movs r0, #0; add sp, #0x10; pop {r4, pc}
> 0x000442c1 : str r7, [r0]; mov r0, r3; pop {r4, r5, r6, r7}; bx lr
> 0x000786d1 : str r2, [r1, #0xc]; str r3, [r1, #0x1c]; pop {r3, r4, r5, pc}
> 0x0008cfa7 : str r0, [r2, #0x58]; mov r0, r7; add sp, #0xc; pop {r4, r5, r6, r7, pc}
> 0x00026daf : strh r7, [r1, #0xc]; mov r0, r4; strd r2, r3, [r1, #0x10]; pop {r4, r5, r6, r7, pc}
> 0x000485c3 : str r7, [r3, #4]; movs r3, #0; str.w r3, [r6, #0xa0]; pop {r3, r4, r5, r6, r7, pc}
> 0x0002fe5d : str r6, [r0]; movs r0, #2; str r1, [r2]; pop {r4, r5, r6, r7}; bx lr
> 0x00086ec3 : str r6, [r1, r2]; str r4, [r7, #4]; str r3, [r5, #4]; pop {r3, r4, r5, r6, r7, pc}
> 0x0004a9ab : str r1, [r5, #0x10]; str r2, [r5, #0x18]; str r2, [r4, #0xc]; pop {r3, r4, r5, r6, r7, pc}
> 0x000b6e0b : str.w r1, [r8, #8]; addw r0, fp, #0x4c4; ldr.w r3, [fp, #0x7f4]; blx r3
> 0x000aee9d : str.w sl, [r4, #0x24]; ldr r3, [r2, #0xc]; ldr r2, [r4, #0x48]; blx r3
> 0x000b0291 : str.w r3, [sl]; ldr r3, [r5, #4]; mov r0, r5; ldr r3, [r3, #0x10]; blx r3
> 0x00086f87 : str r7, [r2, r1]; add r2, r1; str r5, [r2, #4]; str r4, [r2, #8]; str r3, [r6, #4]; pop {r3, r4, r5, r6, r7, pc}