ropshell> use 185ae6f5ea5bd91654e8974410db77b3 (download)
name         : hwsec.elf (arm/ELF)
base address : 0x10000100
total gadgets: 1035

ropshell> suggest
jmpcall
    > 0x10000265 : bx r0
    > 0x100001f5 : bx r2
    > 0x1000248d : bx r3
    > 0x1000808b : bx r4
    > 0x100136f1 : bx ip
load mem
    > 0x100001f3 : ldrh r0, [r1]; bx r2
    > 0x10011edf : ldr r0, [r3]; bx lr
    > 0x100073e7 : ldrsh.w r2, [r0, #0x100]; pop {r2, pc}
    > 0x1001018d : ldr r4, [r5, r4]; blx r4
    > 0x1001368f : ldr r1, [pc, #4]; bx lr
pop pop ret
    > 0x100074dd : pop {pc}
    > 0x10002b01 : pop {r0, pc}
    > 0x10008191 : pop {r4, r5, pc}
    > 0x10007bcb : pop {r0, r1, r2, pc}
    > 0x10001a47 : pop {r4, r5, r6, r7, pc}
stack pivoting
    > 0x10000447 : mov sp, r7; pop {r7, pc}
write mem
    > 0x10012bc9 : str r1, [r3]; bx lr
    > 0x10012dd7 : str r3, [r0, #0x10]; pop {r4, r5, r6, pc}
    > 0x10007401 : str r6, [r2, #0x70]; pop {r4, r5, r6, r7, pc}
    > 0x10010413 : str r0, [r4, #0x50]; pop {r4, r5, r6, pc}
    > 0x100103a1 : str r3, [r4, #0x50]; pop {r4, r5, r6, pc}