ropshell> use de76387ee04cd5722cfd971d9ba49838 (download)
name         : leaked_elf (arm/RAW)
base address : 0x0
total gadgets: 40

ropshell> suggest
jmpcall
    > 0x0000070c : bx r3
    > 0x0000099b : bx sp
    > 0x000004ec : bx lr
    > 0x000008d5 : blx lr
load mem
    > 0x000006d6 : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x00000702 : ldr r3, [pc, #0x10]; cmp r3, #0; bxeq lr
    > 0x000006ce : ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
pop pop ret
    > 0x000008cc : pop {r4, pc}
    > 0x0000087c : pop {r4, r5, pc}
    > 0x00000658 : pop {r4, r5, r6, pc}
write mem
    > 0x000008cd : strh r0, [r2]; pop.w {r0, r1, r4, r6, r7}; movs r0, r0; blx lr