ropshell> use 7aaae57ca9ed695f6ae168db14086293 (download) name : libc.so.6 (i386/ELF) base address : 0x1d1d0 total gadgets: 16141
ropshell> suggest "load reg" > 0x0002c2d2 : pop eax; ret > 0x000224a6 : pop ebx; ret > 0x000350e5 : pop edx; ret > 0x0001e879 : pop esi; ret > 0x0001d26d : pop edi; ret > 0x0001e973 : pop ebp; ret > 0x000f2ca0 : pop esp; ret > 0x0010c200 : pop ecx; pop eax; ret > 0x00147b0d : mov eax, [esp]; ret > 0x00147b09 : mov ebx, [esp]; ret > 0x00147b1d : mov ecx, [esp]; ret > 0x00147b11 : mov edx, [esp]; ret > 0x00147b19 : mov esi, [esp]; ret > 0x00147b15 : mov edi, [esp]; ret > 0x00147b21 : mov ebp, [esp]; ret > 0x00096703 : popal ; jmp [esi + 0xf]