ropshell> use f890cebde61c8d0ecb3c4505678204f7 (download)
name         : ch56 (arm/ELF)
base address : 0x10528
total gadgets: 17
ropshell> suggest
jmpcall
    > 0x00010597 : bx r3
    > 0x00010599 : bx lr
    > 0x00010605 : blx r3
load mem
    > 0x00010566 : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x0001055e : ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x0001055a : ldr r3, [pc, #0x14]; ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
pop pop ret
    > 0x000105e3 : pop {r4, pc}
write mem
    > 0x000108a7 : strh r0, [r7, #0x1e]; lsls r6, r6, #0x18; movs r1, r0; lsls r4, r5, #0x18; movs r1, r0; bx lr