ropshell> use 75cbe8aeb33c63b519a8cf0dce4b3a9a (download)
name         : ch46 (arm/RAW)
base address : 0x0
total gadgets: 33
ropshell> suggest
jmpcall
    > 0x00000503 : bx r3
    > 0x00001a2f : bx r8
    > 0x00001973 : bx fp
    > 0x00000505 : bx lr
    > 0x00000571 : blx r3
load mem
    > 0x000004d2 : ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x00001a2b : ldr r1, [r4, #0x14]; eors r6, r5; bx r8
    > 0x00001a29 : ldr r7, [r3, #0x54]; ldr r1, [r4, #0x14]; eors r6, r5; bx r8
    > 0x000004ca : ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
    > 0x000004c6 : ldr r3, [pc, #0x14]; ldr r2, [pc, #0x14]; add r3, pc, r3; ldr r2, [r3, r2]; cmp r2, #0; bxeq lr
pop pop ret
    > 0x000003f8 : pop {r3, pc}
write mem
    > 0x00001ab1 : str r0, [r5, #0x14]; eors r2, r6; bx r8
    > 0x00001a3d : str r4, [r6, #0x54]; eors r5, r5; bx r8
    > 0x000006bb : strh r0, [r7, #0x1e]; lsrs r2, r5, #0x20; movs r1, r0; lsrs r0, r4, #0x20; movs r1, r0; bx lr