ropshell> use 9165d45be0264f07b443dd7a2938e7e6 (download)
name         : libc.so (arm/ELF)
base address : 0x11050
total gadgets: 2181

ropshell> suggest
jmpcall
    > 0x0001c0c7 : bx r0
    > 0x00029a39 : bx r1
    > 0x000116ef : bx r2
    > 0x0002f8d1 : bx r3
    > 0x0002da11 : bx r6
load mem
    > 0x00049571 : ldr r0, [r2]; pop {r3, r4, r5, pc}
    > 0x00038fc7 : ldr r0, [r4]; pop {r3, r4, r5, r6, r7, pc}
    > 0x000140b3 : ldr r0, [r5]; pop {r4, r5, r6, pc}
    > 0x000138f1 : ldrh r1, [r0, r4]; pop {r0, r4, r5, pc}
    > 0x00012791 : ldr r3, [r2]; blx r3
pop pop ret
    > 0x000539e4 : pop {r0, pc}
    > 0x00027757 : pop {r1, r4, pc}
    > 0x0004c8f3 : pop {r0, r1, r2, pc}
    > 0x00033699 : pop {r0, r1, r2, r3, pc}
    > 0x000147c1 : pop {r0, r1, r2, r6, r7, pc}
stack pivoting
    > 0x0002fc9b : mov sp, r7; pop.w {r4, r5, r6, r7, lr}; add sp, #0xc; bx lr
syscall
    > 0x000392ea : svc #0; mov r7, ip; cmn r0, #0x1000; bxls lr
write mem
    > 0x0002dc3d : str r1, [r0]; pop {r3, pc}
    > 0x00013837 : str r2, [r0]; pop {r0, r4, r5, pc}
    > 0x00015589 : str r3, [r0]; pop {r4, pc}
    > 0x00048a55 : str r4, [r0]; pop {r4, pc}
    > 0x0001ff27 : str r5, [r0]; pop {r3, r4, r5, r6, r7, pc}