ropshell> use b7f8fd5f3c6631031d7297b64179b84d (download) name : libc-2.13.so (arm/ELF) base address : 0x154a0 total gadgets: 4829
ropshell> suggest jmpcall > 0x000cf56c : bx r0 > 0x0010a5a0 : bx r1 > 0x0008d550 : bx r2 > 0x00015690 : bx r3 > 0x0001c4f4 : bx r4 load mem > 0x0006438a : ldrlo r0, [r2]; bx lr > 0x000d183a : ldr r0, [r1, r3]; bx lr > 0x00017306 : ldr r0, [r3, r2]; bx lr > 0x0007fdca : ldr r3, [r0]; cmp r3, r1; bxeq lr > 0x0006c70e : ldr ip, [r3]; mov lr, pc; bx ip pop pop ret > 0x0002b37d : pop {r5, pc} > 0x00109ec1 : pop {r1, r2, pc} > 0x0004db2d : pop {r0, r1, r4, pc} > 0x000a66bd : pop {r0, r1, r2, r3, pc} > 0x00025f41 : pop {r0, r1, r3, r4, r5, pc} syscall > 0x00015af5 : svc #0; pop {r7, pc} write mem > 0x000cc60a : streq r1, [r0]; bxeq lr > 0x00062d86 : str r3, [r0]; bx lr > 0x000bd1a2 : str r3, [r1]; bx lr > 0x0006a202 : str r3, [r2]; bx lr > 0x0007fd86 : str r1, [r3]; bxeq lr