ropshell> use b1105a814d99407bb030722c3ad87eb9 (download)
name         : roplevel6 (armv7/MACHO)
base address : 0x4000
total gadgets: 14

ropshell> suggest
jmpcall
    > 0x0000bd64 : bx lr
    > 0x0000be14 : blx r1
load mem
    > 0x0000be0a : ldr r1, [r7, #-8]; ldr r1, [r1, #0x40]; str r0, [sp, #8]; blx r1
pop pop ret
    > 0x0000bd58 : pop {r4, pc}
stack pivoting
    > 0x0000bd56 : mov sp, r5; pop {r4, pc}
    > 0x0000bcee : mov sp, r7; pop {r7, pc}