ropshell> use 0ce55bea8ae8446ab190e66826534232 (download)
name         : libc.so (arm/ELF)
base address : 0x18270
total gadgets: 2981

ropshell> suggest
jmpcall
    > 0x00018db1 : bx r0
    > 0x0001856d : bx r1
    > 0x00018559 : bx r2
    > 0x0008c8a0 : bx r3
    > 0x00063491 : bx r4
load mem
    > 0x00053277 : ldr r0, [r4]; pop {r4, r5, r6, pc}
    > 0x00034351 : ldr r0, [r5]; pop {r4, r5, r6, pc}
    > 0x0001a77f : ldrh r1, [r0, r4]; pop {r0, r4, r5, pc}
    > 0x000341c5 : ldr r2, [r0, #0x58]; pop {r4, r5, r6, pc}
    > 0x00052787 : ldr r1, [r2, #0x58]; pop {r4, pc}
pop pop ret
    > 0x000796ed : pop {pc}
    > 0x0001aec0 : pop {r0, pc}
    > 0x000192b9 : pop {r0, r1, pc}
    > 0x000606d3 : pop {r0, r1, r4, pc}
    > 0x00019291 : pop {r0, r1, r2, r3, pc}
stack pivoting
    > 0x000844fd : mov sp, sl; movs r1, r0; ldr r2, [pc, #0xd0]; movs r1, r0; ldr r1, [pc, #0x330]; movs r1, r0; bx r0
syscall
    > 0x00019d6e : svc #0; mov r7, ip; cmn r0, #0x1000; bxls lr
write mem
    > 0x0001d057 : str r1, [r0]; pop {r4, r5, r6, pc}
    > 0x0001a6cf : str r2, [r0]; pop {r0, r4, r5, pc}
    > 0x0001a707 : strh r3, [r0]; pop {r0, r4, r5, pc}
    > 0x0004f177 : str r4, [r0]; pop {r4, pc}
    > 0x00022223 : str r5, [r0]; pop {r4, r5, r7, pc}