ropshell> use d81b50a755b7421bab4151fdf8c21c41 (download)
name         : WebMgr (arm/ELF)
base address : 0x9870
total gadgets: 90
ropshell> suggest
jmpcall
    > 0x000098ad : bx r0
    > 0x000098b1 : bx r1
    > 0x000098b5 : bx r2
    > 0x000098b9 : bx r3
    > 0x000098bd : bx r4
pop pop ret
    > 0x0001a3bd : pop {r2, pc}
    > 0x0001a155 : pop {r0, r2, pc}
    > 0x0001a3e1 : pop {r0, r1, r2, pc}
    > 0x0001a185 : pop {r1, r2, r4, r6, pc}
    > 0x0001a019 : pop {r0, r2, r4, r6, r7, pc}
write mem
    > 0x0001aff9 : str r0, [r5, #0x38]; movs r2, r0; pop {r4, pc}
    > 0x0001605d : str r4, [r0, #0x4c]; movs r1, r0; blx sl
    > 0x00016065 : str r0, [r3, #0x40]; movs r1, r0; blx ip
    > 0x00016009 : strh r0, [r2, #0x14]; movs r2, r0; rors r0, r3; movs r2, r0; bx sl