ropshell> use 620528fdb4934f5c216d4d35aecb4792 (download)
name         : ch46 (arm/ELF)
base address : 0x104ac
total gadgets: 18

ropshell> suggest
jmpcall
    > 0x00010530 : bx r3
    > 0x00010504 : bxeq lr
load mem
    > 0x000104fe : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x0001051a : ldr r3, [pc, #0x18]; cmp r3, r0; bxeq lr
    > 0x00010516 : ldr r0, [pc, #0x18]; ldr r3, [pc, #0x18]; cmp r3, r0; bxeq lr
    > 0x000104f6 : ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
pop pop ret
    > 0x00010598 : pop {r4, pc}