ropshell> use 4ceb46508c1e1f3306f5893956f05088 (download)
name         : ECC0101_V1.37.00.aut (arm/RAW)
base address : 0x0
total gadgets: 5586

ropshell> suggest
jmpcall
    > 0x0003b2f5 : bx r0
    > 0x0000d757 : bx r2
    > 0x0002fb71 : bx r3
    > 0x000c68a9 : bx r4
    > 0x00037f79 : bx r5
load mem
    > 0x00005e5f : ldrh r1, [r2]; pop {r0, pc}
    > 0x000719f9 : ldr.w r2, [r3]; pop {r0, pc}
    > 0x000cc485 : ldrh.w r2, [r0, r0]; pop {r4, pc}
    > 0x00088b8f : ldr.w r2, [r1, r0]; pop {r1, r2, r3, r4, r5, pc}
    > 0x000b1093 : ldrh.w fp, [r2, sl]; pop {r4, r5, r6, pc}
pop pop ret
    > 0x00006e97 : pop {pc}
    > 0x00000827 : pop {r0, pc}
    > 0x000c2d89 : pop {r0, r3, pc}
    > 0x00004a65 : pop {r0, r1, r2, pc}
    > 0x000ac40f : pop {r0, r1, r2, r4, pc}
write mem
    > 0x00078611 : str r4, [r0]; pop {r4, pc}
    > 0x000672d1 : str r5, [r0]; pop {r0, r1, r2, r4, r5, pc}
    > 0x00001519 : strh r6, [r0]; pop {r0, r1, r2, r4, r5, r6, r7, pc}
    > 0x00003955 : str r0, [r1]; pop {r0, pc}
    > 0x000d5bd3 : strh r6, [r2]; pop {r0, r1, r5, r6, pc}