ropshell> use 10f6cd85d683ae08273ef4f3d0a297de (download)
name         : libc.so.6 (i386/ELF)
base address : 0x18690
total gadgets: 16559

ropshell> suggest "load reg"
> 0x00024e1e : pop eax; ret
> 0x00018d05 : pop ebx; ret
> 0x0002d71d : pop edx; ret
> 0x00018807 : pop esi; ret
> 0x0001871b : pop edi; ret
> 0x000188fc : pop ebp; ret
> 0x00022550 : pop esp; ret
> 0x000fc510 : pop ecx; pop eax; ret
> 0x00137409 : mov eax, [esp]; ret
> 0x00137405 : mov ebx, [esp]; ret
> 0x00137419 : mov ecx, [esp]; ret
> 0x0013740d : mov edx, [esp]; ret
> 0x00137411 : mov esi, [esp]; ret
> 0x0013741d : mov edi, [esp]; ret
> 0x00137415 : mov ebp, [esp]; ret
> 0x0008a3e3 : popal ; jmp [esi + 0xf]