ropshell> use 974dcae4035821b02a0076ad8133298a (download)
name         : libandroid.so (arm/ELF)
base address : 0x8658
total gadgets: 361

ropshell> suggest
jmpcall
    > 0x000088b3 : bx lr
    > 0x0000b155 : bx pc
    > 0x000088df : blx r1
    > 0x000087bd : blx r2
    > 0x0000873c : blx r3
load mem
    > 0x000088cd : ldr r0, [r4, #8]; pop {r4, pc}
    > 0x000087f3 : ldr r2, [r4]; blx r7
    > 0x00008b81 : ldr r0, [r1, #4]; bx lr
    > 0x00009a9b : ldr r2, [r6, r2]; blx r5
    > 0x00008e65 : ldr r1, [r0, #0x18]; blx r1
pop pop ret
    > 0x000088ff : pop {r3, pc}
    > 0x0000b147 : pop {r2, r3, pc}
    > 0x0000886d : pop {r3, r4, r5, pc}
    > 0x00009487 : pop {r4, r5, r6, r7, pc}
    > 0x000086a9 : pop {r0, r2, r3, r4, r6, pc}
write mem
    > 0x00008843 : str r4, [r0]; pop {r4, pc}
    > 0x00009b7f : str r3, [r4, #4]; pop {r3, r4, r5, pc}
    > 0x00008aa9 : strh r1, [r0, #0x18]; bx lr
    > 0x000088b1 : str r3, [r0, #4]; bx lr
    > 0x00009a71 : str r2, [r4, r0]; mov r0, r4; pop {r3, r4, r5, pc}