We only need to set up the arguments to printf_, so we use the gadget at
0x0800048d, which is pop {r0, r1, pc}. I found it using ropper.

As arguments to the gadget we push r0 (address of the flag), r1 (garbage) and pc (printf_).
