ropshell> use 40860aa4eab257bd5c35e2dfac4cca07 (download) name : libc-2.27.so (i386/ELF) base address : 0x18610 total gadgets: 16552
ropshell> suggest "load reg" > 0x00024c1e : pop eax; ret > 0x00018c85 : pop ebx; ret > 0x0002d62d : pop edx; ret > 0x00018787 : pop esi; ret > 0x0001869b : pop edi; ret > 0x0001887c : pop ebp; ret > 0x00136ea6 : pop esp; ret > 0x000fc380 : pop ecx; pop eax; ret > 0x001372c9 : mov eax, [esp]; ret > 0x001372c5 : mov ebx, [esp]; ret > 0x001372d9 : mov ecx, [esp]; ret > 0x001372cd : mov edx, [esp]; ret > 0x001372d1 : mov esi, [esp]; ret > 0x001372dd : mov edi, [esp]; ret > 0x001372d5 : mov ebp, [esp]; ret > 0x0008a303 : popal ; jmp [esi + 0xf]