ropshell> use 342b8a149938de74084982af623df222 (download)
name         : libc.so.6 (i386/ELF)
base address : 0x730c00
total gadgets: 11084

ropshell> suggest "load mem"
> 0x007735bc : mov eax, [ecx]; pop ebp; ret
> 0x0073954f : mov eax, [ecx + 0x1154]; ret
> 0x007ed4c2 : mov eax, [edx + 0x18]; ret
> 0x0077bc5e : movzx eax, [edx]; pop esi; pop ebp; ret
> 0x0073b55c : mov ecx, [edx]; sub eax, ecx; ret
> 0x0077b713 : mov eax, [ebp + 8]; pop ebp; ret
> 0x007971c1 : mov eax, [ebx + 0x3a78]; pop ebx; pop ebp; ret
> 0x0080905a : mov ecx, [edx + 0x10]; sub eax, ecx; ret
> 0x007f8453 : mov edi, [ebx + esi]; add al, ch; ret
> 0x00815c96 : mov edi, [esi]; add ecx, edi; call ecx
> 0x0077b431 : mov eax, [esi + 8]; sub eax, ecx; pop esi; pop ebp; ret
> 0x00776c24 : mov ecx, [eax + 0x10]; sub edx, ecx; mov eax, edx; ret
> 0x007df87c : mov eax, [esi]; mov [esp], eax; call edi
> 0x007d0e19 : movzx edx, [ecx]; mov [eax], dx; xor eax, eax; pop ebp; ret
> 0x007a80e4 : mov ecx, [ebp + 0x10]; call [ecx + 0x10]
> 0x0081def9 : mov edx, [ebx + 0x3b90]; mov eax, esi; call edx
> 0x0073d78a : mov edx, [ecx + 0x38]; mov eax, [edx + eax*4]; ret
> 0x007a814e : mov edx, [ebp + 0x10]; call [edx + 0x18]
> 0x007a63ca : mov esi, [ebx + 0xaac]; call [esi + 0x14]
> 0x007a81b6 : mov edi, [ebp + 0x10]; call [edi + 0x14]
> 0x007d112f : mov eax, [edi]; lea esp, [ebp - 0xc]; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x00772c90 : mov edx, [eax]; add esp, 8; mov eax, edx; pop ebx; pop esi; pop ebp; ret
> 0x00744ae1 : mov edi, [eax]; add [eax], al; add [ebx + 0x5d], bl; ret
> 0x007ec1b4 : mov ecx, [esi + 0x30]; mov [esp], ecx; call edx
> 0x007437d4 : mov ebp, [ecx + 0xc]; mov esp, [ecx + 0x10]; jmp edx
> 0x008099d1 : mov ecx, [esi]; mov [esp], ecx; call [esi + 0x20]
> 0x007f2b38 : mov ecx, [edi]; mov [esp], ecx; call [ebp - 0x14]
> 0x0080991b : mov edx, [esi]; mov [esp], edx; call [esi + 0x20]
> 0x00809822 : mov edx, [edi]; mov [esp], edx; call [edi + 0x20]
> 0x0078a543 : mov esi, [edi]; mov [esp], esi; call [ecx + 0x14]
> 0x0073d36b : mov ebx, [eax + edx]; add [ebx - 0xab75], cl; jmp [ebp + 3]
> 0x007f1076 : mov ecx, [edi + ebp]; add [eax], al; add al, [ebx + 0x5d5b08c4]; ret
> 0x00782a92 : mov esi, [ebp + 0xc]; mov [esp + 4], esi; call edx
> 0x007fe5e6 : mov ecx, [eax]; xchg ebx, ecx; mov eax, 6; call gs:[0x10]; xchg ebx, ecx; pop ebp; ret
> 0x00802c2d : mov eax, [edi + 0x3c]; mov [esp], esi; call [eax + 0x10]
> 0x00776c21 : mov edx, [eax + 0x14]; mov ecx, [eax + 0x10]; sub edx, ecx; mov eax, edx; ret
> 0x00783394 : mov edx, [esi + 0x24]; mov [esp], edx; call [esi + 0x20]
> 0x0078324f : mov edx, [edi + 0x24]; mov [esp], edx; call [edi + 0x1c]
> 0x0080bf7c : mov esi, [eax + 0x20]; mov [esp], eax; call [esi + 0x10]
> 0x0080c04f : mov esi, [edx + 4]; mov [esp], edx; call [esi + 0x10]
> 0x0081b0af : mov esi, [edi + 0x4c]; mov [esp], edi; call [esi + 0x44]
> 0x008046f4 : mov edi, [ecx + 0x20]; mov [esp], ecx; call [edi + 0x10]
> 0x0080472b : mov edi, [edx + 4]; mov [esp], edx; call [edi + 0x10]
> 0x00774300 : mov edi, [esi + 0x54]; mov [esp], edi; call [edi + 0x10]
> 0x007e3a77 : mov edi, [eax + 0x31000024]; ror [ebx + 0x758bf45d], -8; mov edi, [ebp - 4]; mov esp, ebp; pop ebp; ret
> 0x008034ef : mov esi, [ecx + 0x20]; mov [esp + 4], edi; mov [esp], ecx; call [esi + 8]
> 0x00752f3e : mov ebp, [eax + 0x2c]; mov ebx, [eax + 0x34]; mov edx, [eax + 0x38]; mov ecx, [eax + 0x3c]; mov eax, [eax + 0x40]; ret
> 0x007437cb : mov ebx, [ecx]; mov esi, [ecx + 4]; mov edi, [ecx + 8]; mov ebp, [ecx + 0xc]; mov esp, [ecx + 0x10]; jmp edx