ropshell> use 6d7540510395dd36bd884a8036cc8396 (download)
name         : libc.so.6 (arm/ELF)
base address : 0x1efc0
total gadgets: 5523

ropshell> suggest
jmpcall
    > 0x0003b82d : bx r0
    > 0x00030745 : bx r1
    > 0x00044dd5 : bx r2
    > 0x0001f66d : bx r3
    > 0x0006ef95 : bx r4
load mem
    > 0x0005642b : ldr r0, [r2]; pop {r4, r5, r6, pc}
    > 0x000560c7 : ldr r0, [r3]; pop {r3, r4, r5, pc}
    > 0x000b6aab : ldr.w fp, [r2, r4]; pop {r4, pc}
    > 0x000e5249 : ldr r0, [r6, r3]; pop {r4, r5, r6, pc}
    > 0x00062fab : ldrsh.w r2, [r6, fp]; pop {r3, r4, r5, pc}
pop pop ret
    > 0x0004abd5 : pop {r1, pc}
    > 0x00071664 : pop {r0, r4, pc}
    > 0x00048777 : pop {r0, r1, r3, pc}
    > 0x00046e5b : pop {r0, r1, r2, r3, pc}
    > 0x00048fe9 : pop {r0, r1, r2, r3, r4, pc}
stack pivoting
    > 0x00095b49 : mov sp, r7; pop {r4, r5, r6, r7, pc}
syscall
    > 0x0001f735 : svc #0; pop {r7, pc}
write mem
    > 0x00058347 : str r2, [r0]; pop {r3, r4, r5, pc}
    > 0x0003d109 : str r3, [r0]; pop {r3, r4, r5, pc}
    > 0x000e7c4f : str r5, [r0]; pop {r3, r4, r5, pc}
    > 0x000582b7 : str r3, [r1]; pop {r4, pc}
    > 0x00076017 : str r4, [r1]; pop {r4, r5, pc}