ropshell> use f553a5a1d2ebe33fef381a77cd0e0642 (download)
name         : armigo (arm/ELF)
base address : 0x10170
total gadgets: 2008

ropshell> suggest
jmpcall
    > 0x000217f0 : bx r0
    > 0x000187f4 : bx r1
    > 0x0002154c : bx r2
    > 0x000103f0 : bx r3
    > 0x00018184 : bx r4
load mem
    > 0x0005e692 : ldr r0, [r1]; bx lr
    > 0x0001ea66 : ldr r0, [r3]; bx lr
    > 0x00061ad6 : ldr r1, [r0, #4]; bx r1
    > 0x00056e42 : ldr r3, [r1]; mov lr, pc; bx r3
    > 0x0005c05e : ldr r0, [r2]; mov lr, pc; bx r3
pop pop ret
    > 0x00025c29 : pop {r0, r5, pc}
    > 0x0001e069 : pop {r0, r1, r4, pc}
    > 0x0003819d : pop {r0, r1, r4, r7, pc}
    > 0x000380cd : pop {r0, r1, r2, r6, r7, pc}
    > 0x0003806d : pop {r0, r1, r2, r3, r4, r6, r7, pc}
stack pivoting
    > 0x000610fe : mov sp, r7; ldr r7, [sp, #0x10c]; ldr lr, [sp, #0x5c]; add sp, sp, #0x110; bx lr
syscall
    > 0x0005571a : svc #0; pop {r7}; bx lr
write mem
    > 0x00061e06 : strne r3, [r0]; bx lr
    > 0x0005e896 : str r3, [r1]; bx lr
    > 0x00072206 : str ip, [r1]; bx lr
    > 0x0002b186 : str r0, [r2]; bxeq lr
    > 0x0001e7ce : str r3, [r2]; bx lr