ropshell> use 1edda96a7a6345ed3926561cfc15b75c (download)
name         : libc.so.6 (i386/RAW)
base address : 0x0
total gadgets: 28446

ropshell> suggest
call
    > 0x00009813 : call eax
    > 0x0002ae3b : call ebx
    > 0x00024da2 : call ecx
    > 0x000268e0 : call edx
    > 0x00024d4b : call esi
jmp
    > 0x000328e2 : push esp; ret
    > 0x00025087 : jmp eax
    > 0x0000aa5b : jmp ebx
    > 0x00031d45 : jmp ecx
    > 0x000367e0 : jmp edx
load mem
    > 0x000796eb : mov eax, [edx]; ret
    > 0x001bb646 : mov edi, [edx]; ret
    > 0x00140ceb : mov eax, [edx + eax]; ret
    > 0x00086a30 : mov eax, [ecx]; mov [edx], eax; ret
    > 0x00086a7d : mov eax, [ecx + 8]; sub eax, edx; ret
load reg
    > 0x00101325 : pop eax; ret
    > 0x0002456f : pop ebx; ret
    > 0x001ea916 : pop ecx; ret
    > 0x000093a2 : pop edx; ret
    > 0x00024c19 : pop esi; ret
pop pop ret
    > 0x00101325 : pop eax; ret
    > 0x00198f2b : pop ebp; pop ebx; ret
    > 0x000d1e67 : pop eax; pop edi; pop esi; ret
    > 0x00050e4a : pop eax; pop ebx; pop esi; pop edi; ret
    > 0x00029ddf : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x00140a54 : add esp, 0x11c; ret
    > 0x00140a54 : add esp, 0x11c; ret
    > 0x001a9075 : add esp, 0x20; ret
    > 0x00123374 : add esp, 0x3c; ret
    > 0x00115259 : add esp, 0x4c; ret
stack pivoting
    > 0x0003027e : xchg eax, esp; ret
    > 0x001551f8 : xchg esp, ebx; ret
    > 0x0003bf3f : mov esp, ecx; jmp edx
    > 0x001d3f55 : mov esp, esi; jmp eax
    > 0x001d0545 : xchg edi, esp; jmp [ecx + eax]
syscall
    > 0x00096289 : call gs:[0x10]; ret
write mem
    > 0x000bb08c : add [eax], edx; ret
    > 0x000bb0ac : add [eax], esi; ret
    > 0x000a5505 : add [eax], edi; ret
    > 0x00066ddb : add [ecx], eax; ret
    > 0x0002c2c9 : add [ecx], edi; ret