ropshell> use e4723f378be03755bad7c20f0bce3ade (download)
name         : eta (arm/ELF)
base address : 0x14f5c
total gadgets: 295

ropshell> suggest
jmpcall
    > 0x00015774 : bx r3
    > 0x0001584c : bx lr
    > 0x00015c4c : blx r3
    > 0x0001a481 : blx lr
    > 0x0001ac79 : blx pc
load mem
    > 0x000272fe : ldr r0, [r1, #4]; bx lr
    > 0x00023bae : ldr r0, [r2]; cmp r0, r1; bxne lr
    > 0x0001ed22 : ldrne r2, [r1]; strne r2, [r3]; bx lr
    > 0x0002a1ee : ldr r3, [r2, #0x50]; blx r3
    > 0x00029ba2 : ldr r2, [r3, #0x174]; cmp r2, r0; bxne lr
pop pop ret
    > 0x000256a5 : pop {pc}
    > 0x00025641 : pop {r0, pc}
    > 0x00025ab1 : pop {r0, r2, pc}
    > 0x00025619 : pop {r0, r1, r3, pc}
    > 0x00025839 : pop {r0, r1, r5, r7, pc}
write mem
    > 0x00029e8e : str r5, [r3]; pop {r4, r5, r6, pc}
    > 0x000276e6 : str r1, [r3]; bx lr
    > 0x000184e6 : str r3, [r4, #0x2c4]; pop {r4, r5, r6, pc}
    > 0x0001fc9e : streq r3, [r2, #0x38]; add sp, sp, #0x590; pop {r4, pc}
    > 0x000276de : str r0, [r2]; mov r0, #1; str r1, [r3]; bx lr