ropshell> use c8fda672a793b2a9a22e7acb1e1a02fb (download) name : libc.so (arm/ELF) base address : 0xc9e0 total gadgets: 1959
ropshell> suggest jmpcall > 0x0001f44f : bx r0 > 0x0002100b : bx r1 > 0x000229e1 : bx r2 > 0x00035145 : bx r5 > 0x0002c0e3 : bx r8 load mem > 0x000299e5 : ldr r0, [r4]; pop {r3, r4, r5, pc} > 0x0002c567 : ldrh r2, [r0, r2]; pop {r2, r7, pc} > 0x0002d8f5 : ldrh r4, [r0, #0x18]; pop {r3, r4, r5, r6, r7, pc} > 0x000269df : ldr r0, [r1, #4]; pop {r4, r5, pc} > 0x0000d0b1 : ldr r3, [r1]; blx r3 pop pop ret > 0x0001c04d : pop {pc} > 0x00039b44 : pop {r0, pc} > 0x0002d949 : pop {r0, r4, pc} > 0x00013731 : pop {r0, r1, r2, pc} > 0x0003767f : pop {r0, r3, r6, r7, pc} stack pivoting > 0x0001ac41 : mov sp, r7; pop.w {r4, r5, r7, lr}; add sp, #0xc; bx lr syscall > 0x0001832e : svc #0; pop {r4, r7}; bx lr write mem > 0x0001ec55 : str r3, [r0]; pop {r4, pc} > 0x00032323 : str r4, [r0]; pop {r3, r4, r5, r6, r7, pc} > 0x0002c1a1 : str r2, [r1]; pop {r3, pc} > 0x00026739 : str r4, [r1]; pop {r4, r5, r6, r7, pc} > 0x0002561b : str r0, [r2]; pop {r4, r5, r6, r7, pc}