ropshell> use 10f6cd85d683ae08273ef4f3d0a297de (download)
name         : libc.so.6 (i386/ELF)
base address : 0x18690
total gadgets: 16559

ropshell> suggest "write mem"
> 0x00097c5c : add [eax], edx; ret
> 0x00097c7c : add [eax], esi; ret
> 0x00082780 : add [eax], edi; ret
> 0x0005b248 : add [ecx], eax; ret
> 0x0003f1b2 : add [ecx], edi; ret
> 0x0007c284 : add [edi], ecx; inc ebp; ret
> 0x0008be41 : add [eax + 0x5f028d02], ecx; ret
> 0x00115463 : add [eax + 2], edi; ret
> 0x000e6dde : adc [ebx + 0x5e5b04c4], eax; ret
> 0x000ae0a5 : add [edi + 0x5d], ebx; ret
> 0x00041245 : add [ebp + 0x390475c9], eax; ret
> 0x0011bea6 : add [esi + 0x5f], ebx; pop ebp; ret
> 0x0012c6e8 : add [eax + 0x14], edx; mov eax, 1; ret
> 0x0002e64e : adc [ebx + 0x74c98508], ecx; xor eax, eax; ret
> 0x0012c7a8 : add [esi + 0x14], edi; pop ebx; pop esi; pop edi; ret
> 0x001156f6 : add [ebp + 0x74023844], ecx; sar [ecx], cl; ret
> 0x00098c22 : adc [ebx], eax; mov eax, [esp + 8]; pop edi; ret
> 0x00117f91 : add [ecx], esi; call [eax - 0x18]
> 0x000f4c97 : add [esi], ebx; xor eax, eax; pop ebx; pop esi; pop edi; ret
> 0x0015d315 : add [ebp + 0x18], esi; lea eax, [ecx + 4]; ret
> 0x000cbd01 : add [ebx], edi; or [edx + esi*8 + 0x5b], bh; ret
> 0x000e14c5 : add [eax + 0x3c0e74df], ebp; cmp cl, [edi]; xchg eax, esp; ret
> 0x00157e99 : add [eax], ecx; add [ebx - 0x14b7d], cl; jmp [ebp + 3]
> 0x0007322b : add [edx], ebp; push 0; push ebx; call [eax + 0x24]
> 0x00082c18 : add [ecx + 0x9cc4], eax; add [ebx + 0x5e], bl; pop edi; pop ebp; ret
> 0x00030a4b : adc [esi + 0xd], edx; add [ebx + 0x5e5b1cc4], al; pop edi; pop ebp; ret
> 0x0012070e : adc [edx + 0x47], esi; cmp eax, 2; sete al; movzx eax, al; add esp, 8; pop ebx; ret
> 0x00087c23 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x000effae : adc [edx + 0x14], edi; sub edx, eax; test eax, eax; cmovns eax, edx; add esp, 8; pop ebx; ret
> 0x000972fe : add [edx], ecx; add [ecx + 0xe26f3c1], al; add [ebx], al; or al, 0x99; jmp ecx
> 0x00127462 : add [eax + 0x5a], ebx; mov eax, [edi + 0x3c]; lea edx, [esp + 0x13c]; push edx; push esi; call [eax + 4]