ropshell> use 342b8a149938de74084982af623df222 (download)
name         : libc.so.6 (i386/ELF)
base address : 0x730c00
total gadgets: 11084

ropshell> suggest
call
    > 0x00730c23 : call eax
    > 0x00735fd0 : call ebx
    > 0x0073125d : call ecx
    > 0x0073118a : call edx
    > 0x00781677 : call esi
jmp
    > 0x00818ff9 : push esp; ret
    > 0x007532d7 : jmp eax
    > 0x00784c84 : jmp ebx
    > 0x00731a8c : jmp ecx
    > 0x0074169e : jmp edx
load mem
    > 0x007735bc : mov eax, [ecx]; pop ebp; ret
    > 0x0073954f : mov eax, [ecx + 0x1154]; ret
    > 0x007ed4c2 : mov eax, [edx + 0x18]; ret
    > 0x0077bc5e : movzx eax, [edx]; pop esi; pop ebp; ret
    > 0x0073b55c : mov ecx, [edx]; sub eax, ecx; ret
load reg
    > 0x0073c33c : pop eax; ret
    > 0x0078496d : pop ebx; ret
    > 0x00743718 : pop edx; ret
    > 0x00784c39 : pop esi; ret
    > 0x00753336 : pop edi; ret
pop pop ret
    > 0x0073c33c : pop eax; ret
    > 0x00730ed4 : pop ebx; pop ebp; ret
    > 0x007732fa : pop eax; pop ebx; pop ebp; ret
    > 0x00781bca : pop eax; pop ebx; pop esi; pop ebp; ret
    > 0x0073cba8 : pop eax; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x00784a52 : add esp, 0x100; ret
    > 0x00784a52 : add esp, 0x100; ret
stack pivoting
    > 0x007cabc1 : xchg eax, esp; ret
    > 0x00730d28 : mov esp, ebp; pop ebp; ret
    > 0x00745ea7 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
    > 0x00802965 : xchg edx, esp; repne dec [ebx + 0x758bf45d]; clc ; mov edi, [ebp - 4]; mov esp, ebp; pop ebp; ret
    > 0x007a17e4 : mov esp, esi; clc ; inc [ecx + 0x9d80cc3]; add [ebx - 0xdf6d], cl; jmp [ebp - 0x75]
syscall
    > 0x007a5c45 : call gs:[0x10]; ret
write mem
    > 0x007a2d08 : adc [ebx + 0x5d5b34c4], eax; ret
    > 0x007896d0 : add [esi + 0x5f], ebx; pop ebp; ret
    > 0x0076d3a9 : add [ebp + 2], esi; pop ebp; ret
    > 0x0077721d : add [ecx], ebx; rcr [ebx - 9], -0x30; pop ebp; ret
    > 0x00779c3b : add [edi], ecx; test edi, [esi + 0x5d00001b]; ret