ropshell> use 5d959bb15f320bad9400c3d4c4b40089 (download)
name         : libc-2.27.so (arm/ELF)
base address : 0x16d80
total gadgets: 5101

ropshell> suggest
jmpcall
    > 0x00020c49 : bx r0
    > 0x0003a1c7 : bx r1
    > 0x00040c01 : bx r2
    > 0x000171d7 : bx r3
    > 0x00064779 : bx r4
load mem
    > 0x00049bbf : ldr r0, [r2]; pop {r4, r5, r6, pc}
    > 0x000498a9 : ldr r0, [r3]; pop {r3, r4, r5, pc}
    > 0x00069f8f : ldr.w fp, [lr, r3]; pop {r4, r5, pc}
    > 0x0009789b : ldr r1, [r0, #0x58]; pop {r4, pc}
    > 0x0002455d : ldrh r2, [r0, #0x18]; pop {r3, pc}
pop pop ret
    > 0x0004c641 : pop {r0, pc}
    > 0x000976f6 : pop {r0, r1, pc}
    > 0x0003ff6b : pop {r0, r1, r3, pc}
    > 0x00041dff : pop {r0, r1, r2, r4, pc}
    > 0x00043dcf : pop {r0, r1, r2, r3, r5, pc}
stack pivoting
    > 0x00030963 : mov sp, r7; pop {r4, r5, r6, r7, pc}
syscall
    > 0x00017205 : svc #0; pop {r7, pc}
write mem
    > 0x000af45f : str r3, [r0]; pop {r3, pc}
    > 0x000bb673 : str r4, [r0]; pop {r3, r4, r5, pc}
    > 0x0004bab5 : str r3, [r1]; pop {r4, pc}
    > 0x00016dd1 : str r0, [r2]; pop {r4, r5, r6, pc}
    > 0x0004c379 : str r3, [r2]; pop {r4, pc}