ropshell> use 7eef6f7895500f017d1f080e77b73233 (download)
name         : lib32-libc.so.6 (i386/ELF)
base address : 0x20290
total gadgets: 18126

ropshell> suggest "write mem"
> 0x000b2e8c : add [eax], edx; ret
> 0x000b2eac : add [eax], esi; ret
> 0x000a0af5 : add [eax], edi; ret
> 0x0005eb25 : add [ecx], eax; ret
> 0x0003d122 : add [ecx], edi; ret
> 0x00167173 : add [ecx], ebp; ret
> 0x0011bae6 : add [edi], ecx; inc esp; ret
> 0x000492fd : add [eax + 0x3901104c], ecx; ret
> 0x0011cf56 : add [eax + 1], edi; ret
> 0x000a8b15 : add [ebx + 0x5b5fffd8], eax; ret
> 0x0014bf27 : add [edi + 0x5d], ebx; ret
> 0x000633f3 : add [ebp + 0x440f9304], ecx; ret
> 0x0008ddc3 : add [esi + 0x5f], ebx; pop ebp; ret
> 0x0016331c : add [eax + 0x14], edx; mov eax, 1; ret
> 0x0008df91 : add [ebx + 0x418d1068], ecx; inc [ebx - 0x69f00208]; ret
> 0x0008fd49 : add [ecx], ebx; rcr [ebx + 0x5e], 0x5f; ret
> 0x001633dc : add [esi + 0x14], edi; pop ebx; pop esi; pop edi; ret
> 0x000b3e82 : adc [ebx], eax; mov eax, [esp + 8]; pop edi; ret
> 0x00194785 : add [ebp + 0x18], esi; lea eax, [ecx + 4]; ret
> 0x0009dcd7 : add [ecx + 0x9cc4], eax; add [ecx + 0x5f5e5bc8], cl; pop ebp; ret
> 0x0011b960 : add [ebx], ecx; inc ecx; or [ecx + 0x418b0447], cl; add al, 0x89; ret
> 0x0007daff : add [edx], ebp; push 0; push ebx; call [ebp + 0x24]
> 0x000546f2 : add [ecx], esi; sal bh, cl; pop ebx; pop esi; add ecx, eax; mov eax, ecx; ret
> 0x000a2dc3 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x001210f1 : adc [edi + 0x10], ecx; add [edi + 0x31], dl; call [esi + 0x53]
> 0x00083faa : add [edi + 0x13], esi; mov edx, [esp + 4]; mov [edx], eax; xor eax, eax; ret
> 0x0015dbc9 : add [eax + 0x5a], ebx; mov eax, [ebp + 0x3c]; lea edx, [esp + 0x14c]; push edx; push ebx; call [eax + 4]