ropshell> use 35a3115eb9749638fd5e19c26c7fa752 (download)
name         : httpd (arm/ELF)
base address : 0xf9b0
total gadgets: 780

ropshell> suggest
jmpcall
    > 0x0003d279 : bx r0
    > 0x00067231 : bx r1
    > 0x0003d4f1 : bx r2
    > 0x00032dfd : bx r3
    > 0x0003d849 : bx r4
load mem
    > 0x000cec6a : ldr r2, [r0, #0xc]; bxle lr
    > 0x000ca45e : ldr ip, [r4, #0x8d8]; blx ip
    > 0x0001ca92 : ldr r0, [fp, #-0x10]; blx r3
    > 0x0009dd26 : ldr r1, [fp, #-0x10]; blx r3
    > 0x000171f2 : ldr r2, [fp, #0xc]; blx r3
pop pop ret
    > 0x000d9bd0 : pop {r0, pc}
    > 0x000a00ad : pop {r0, r3, pc}
    > 0x000a010d : pop {r0, r2, r6, pc}
    > 0x000a01f1 : pop {r0, r1, r2, r3, pc}
    > 0x000a01b1 : pop {r0, r1, r2, r3, r4, pc}
write mem
    > 0x000cf216 : str r3, [r4]; pop {r3, r4, r5, pc}
    > 0x000d585e : str r2, [r5]; pop {r4, r5, r6, pc}
    > 0x000cec4e : str r3, [r0]; bx lr
    > 0x000cf3b6 : str r2, [r1]; bx lr
    > 0x000c927a : str r3, [r1]; bx lr