ropshell> use 6a9ba29fad2b9881c33763e895caeb98 (download) name : libc.so (arm/ELF) base address : 0x163b0 total gadgets: 2598
ropshell> suggest jmpcall > 0x00016bbb : bx r0 > 0x0001652f : bx r1 > 0x0001651b : bx r2 > 0x00072ff0 : bx r3 > 0x0003a28d : bx r4 load mem > 0x00062ca3 : ldr r0, [r2]; pop {r4, r5, r7, pc} > 0x0002b121 : ldr r0, [r4]; pop {r4, r5, r6, pc} > 0x00046a5f : ldr r0, [r5]; pop {r4, r5, r6, pc} > 0x0001f7b3 : ldrh.w r2, [ip]; pop {r7, pc} > 0x00018187 : ldrh r1, [r0, r4]; pop {r0, r4, r5, pc} pop pop ret > 0x000176b8 : pop {r0, pc} > 0x00020dc5 : pop {r0, r2, pc} > 0x00070a4f : pop {r0, r1, r2, pc} > 0x000349f9 : pop {r0, r1, r3, r5, pc} > 0x00033615 : pop {r0, r1, r2, r4, r7, pc} stack pivoting > 0x0001e2af : mov sp, r4; pop {r4, r6, r7, pc} syscall > 0x0001754e : svc #0; mov r7, ip; cmn r0, #0x1000; bxls lr write mem > 0x0001c0a3 : str r1, [r0]; pop {r4, pc} > 0x000180d7 : str r2, [r0]; pop {r0, r4, r5, pc} > 0x0001810f : strh r3, [r0]; pop {r0, r4, r5, pc} > 0x0006fe0d : str r4, [r0]; pop {r4, pc} > 0x0003f195 : str r5, [r0]; pop {r4, r5, r7, pc}