ropshell> use 75cbe8aeb33c63b519a8cf0dce4b3a9a (download)
name         : ch46 (arm/ELF)
base address : 0x10494
total gadgets: 16

ropshell> suggest
jmpcall
    > 0x00010503 : bx r3
    > 0x00010505 : bx lr
    > 0x00010571 : blx r3
load mem
    > 0x000104d2 : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x000104ca : ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x000104c6 : ldr r3, [pc, #0x14]; ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
pop pop ret
    > 0x0001054f : pop {r4, pc}
write mem
    > 0x000106bb : strh r0, [r7, #0x1e]; lsrs r2, r5, #0x20; movs r1, r0; lsrs r0, r4, #0x20; movs r1, r0; bx lr