ropshell> use 6a9ba29fad2b9881c33763e895caeb98 (download)
name         : libc.so (arm/ELF)
base address : 0x163b0
total gadgets: 2598
ropshell> suggest
jmpcall
    > 0x00016bbb : bx r0
    > 0x0001652f : bx r1
    > 0x0001651b : bx r2
    > 0x00072ff0 : bx r3
    > 0x0003a28d : bx r4
load mem
    > 0x00062ca3 : ldr r0, [r2]; pop {r4, r5, r7, pc}
    > 0x0002b121 : ldr r0, [r4]; pop {r4, r5, r6, pc}
    > 0x00046a5f : ldr r0, [r5]; pop {r4, r5, r6, pc}
    > 0x0001f7b3 : ldrh.w r2, [ip]; pop {r7, pc}
    > 0x00018187 : ldrh r1, [r0, r4]; pop {r0, r4, r5, pc}
pop pop ret
    > 0x000176b8 : pop {r0, pc}
    > 0x00020dc5 : pop {r0, r2, pc}
    > 0x00070a4f : pop {r0, r1, r2, pc}
    > 0x000349f9 : pop {r0, r1, r3, r5, pc}
    > 0x00033615 : pop {r0, r1, r2, r4, r7, pc}
stack pivoting
    > 0x0001e2af : mov sp, r4; pop {r4, r6, r7, pc}
syscall
    > 0x0001754e : svc #0; mov r7, ip; cmn r0, #0x1000; bxls lr
write mem
    > 0x0001c0a3 : str r1, [r0]; pop {r4, pc}
    > 0x000180d7 : str r2, [r0]; pop {r0, r4, r5, pc}
    > 0x0001810f : strh r3, [r0]; pop {r0, r4, r5, pc}
    > 0x0006fe0d : str r4, [r0]; pop {r4, pc}
    > 0x0003f195 : str r5, [r0]; pop {r4, r5, r7, pc}