ropshell> use 3b75fa8b7652cd6bea5f063f6dcf95f7 (download) name : aaa (arm/RAW) base address : 0x0 total gadgets: 9445
ropshell> suggest jmpcall > 0x00332a38 : bx r0 > 0x000d40f8 : bx r1 > 0x00010c40 : bx r2 > 0x0000c174 : bx r3 > 0x000da3e1 : bx r4 load mem > 0x00020eb2 : ldr r0, [r1]; bx lr > 0x002005d6 : ldr r0, [r2]; bx lr > 0x00040ad6 : ldr r3, [r2]; bx lr > 0x0033771f : ldrh r5, [r2, r3]; pop {r0, r2, r4, r5, r6, r7, pc} > 0x003392f1 : ldr r5, [r1, #0x34]; pop {r2, r4, r5, r6, pc} pop pop ret > 0x00037e1d : pop {pc} > 0x00333294 : pop {r0, pc} > 0x00144841 : pop {r0, r1, pc} > 0x001fa7dd : pop {r0, r1, r2, pc} > 0x00125909 : pop {r0, r1, r2, r6, pc} syscall > 0x00007279 : svc #0x48; strh r7, [r4]; pop {r3, r7, pc} write mem > 0x001ab2e6 : strhne r3, [r0]; pop {r4, r5, pc} > 0x001aafae : strhne r3, [r1]; pop {r4, r5, pc} > 0x00325cee : str r2, [r3]; pop {r4, r5, r6, pc} > 0x0033a647 : strh r5, [r3]; pop {r2, r3, r4, r5, r7, pc} > 0x00344d4f : strh r2, [r4]; pop {r2, r5, r7, pc}