ropshell> use 3e335431434927d29bec4f200a5aaa45 (download)
name         : xavas_libc.so (i386/RAW)
base address : 0x0
total gadgets: 26611

ropshell> suggest
call
    > 0x0001865e : call eax
    > 0x0001d5a1 : call ebx
    > 0x00008f67 : call ecx
    > 0x00022354 : call edx
    > 0x000199be : call esi
jmp
    > 0x0011f786 : push esp; ret
    > 0x00029cf2 : jmp eax
    > 0x000559e1 : jmp ebx
    > 0x00019234 : jmp ecx
    > 0x00001a6f : jmp edx
load mem
    > 0x00060d27 : mov eax, [edx]; ret
    > 0x001764a0 : mov ecx, [edx]; ret
    > 0x001530c6 : mov edi, [edx]; ret
    > 0x001058d7 : mov eax, [edx + eax]; ret
    > 0x0006bf99 : mov eax, [ecx]; mov [edx], eax; ret
load reg
    > 0x0002406e : pop eax; ret
    > 0x00018395 : pop ebx; ret
    > 0x000b5377 : pop ecx; ret
    > 0x00001aa6 : pop edx; ret
    > 0x00017828 : pop esi; ret
pop pop ret
    > 0x0002406e : pop eax; ret
    > 0x0013bb0b : pop ebp; pop ebx; ret
    > 0x000a0327 : pop eax; pop edi; pop esi; ret
    > 0x0003da0a : pop eax; pop ebx; pop esi; pop edi; ret
    > 0x0001cda7 : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x00076991 : add esp, 0x100; ret
    > 0x00076991 : add esp, 0x100; ret
    > 0x00018e35 : add esp, 0x24; ret
    > 0x000d501f : add esp, 0x3c; ret
    > 0x00112e20 : add esp, 0x4c; ret
stack pivoting
    > 0x00018ea7 : xchg eax, esp; ret
    > 0x0002bd3f : mov esp, ecx; jmp edx
    > 0x0003e7f7 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
    > 0x00172a75 : mov esp, ebp; call [ebx]
    > 0x00040bf1 : xchg esp, ebx; aad 0xfa; call [eax - 0x18]
syscall
    > 0x000b1265 : call gs:[0x10]; ret
write mem
    > 0x000f7aec : add [eax], ecx; ret
    > 0x0008fcfc : add [eax], edx; ret
    > 0x0008fd1c : add [eax], esi; ret
    > 0x0007a3a8 : add [eax], edi; ret
    > 0x00052aac : add [ecx], eax; ret