ropshell> use 1841414b09de26eca8885472ed3d36bd (download) name : received_file (arm/ELF) base address : 0x15c80 total gadgets: 5287
ropshell> suggest jmpcall > 0x0004333b : bx r0 > 0x0004a4c5 : bx r1 > 0x0006a48f : bx r2 > 0x000178db : bx r3 > 0x0003e369 : bx r4 load mem > 0x0004dc87 : ldr r0, [r2]; pop {r4, r5, r6, pc} > 0x000688dd : ldr r0, [r3]; pop {r3, r4, r5, pc} > 0x0008651b : ldrh.w fp, [r2, r4]; pop {r4, r5, r6, pc} > 0x0006a037 : ldr.w fp, [lr, r3]; pop {r4, r5, pc} > 0x0003e20f : ldr r1, [r0, #0x58]; pop {r4, r5, r6, pc} pop pop ret > 0x000983e9 : pop {r1, pc} > 0x000abf61 : pop {r0, r2, pc} > 0x0003c297 : pop {r0, r1, r2, pc} > 0x0007e195 : pop {r0, r1, r2, r6, pc} > 0x000b71c5 : pop {r0, r1, r2, r3, r5, pc} stack pivoting > 0x00073091 : mov sp, r7; pop {r3, r4, r5, r6, r7, pc} syscall > 0x00017985 : svc #0; pop {r7, pc} write mem > 0x0004b41f : str r2, [r0]; pop {r3, r4, r5, pc} > 0x000b4bc7 : str r4, [r0]; pop {r3, r4, r5, pc} > 0x0009521d : str r3, [r1]; pop {r4, pc} > 0x0005ab4d : str r1, [r2]; pop {r3, r4, r5, pc} > 0x0006a00f : str r3, [r2]; pop {r3, r4, r5, pc}