ropshell> use 99438cae5eac2b3a75c86512778522e0 (download)
name         : libc-2.28.so (i386/ELF)
base address : 0x190e0
total gadgets: 17500

ropshell> suggest "write mem"
> 0x00098fec : add [eax], edx; ret
> 0x0009900c : add [eax], esi; ret
> 0x00035dc5 : add [eax], edi; ret
> 0x0005c9d1 : add [ecx], eax; ret
> 0x00040a30 : add [ecx], edi; ret
> 0x0004bf66 : adc [ecx], ebp; ret
> 0x00116cc0 : adc [eax], ecx; pop ebx; ret
> 0x00062b5d : add [edi], ecx; inc esp; ret
> 0x0008d1d1 : add [eax + 0x5f028d02], ecx; ret
> 0x001166d3 : add [eax + 2], edi; ret
> 0x000f0f7e : adc [ebx + 0x5e5b04c4], eax; ret
> 0x000af5d5 : add [edi + 0x5d], ebx; ret
> 0x0011607a : add [ebp + 0x39020244], ecx; ret
> 0x000991d3 : add [esi + 0x5f], ebx; pop ebp; ret
> 0x0012d9a8 : add [eax + 0x14], edx; mov eax, 1; ret
> 0x0012da68 : add [esi + 0x14], edi; pop ebx; pop esi; pop edi; ret
> 0x00099fd2 : adc [ebx], eax; mov eax, [esp + 8]; pop edi; ret
> 0x000af36b : adc [edx], ebx; add [eax], al; add esp, 0x1c; ret
> 0x0015dff5 : add [ebp + 0x18], esi; lea eax, [ecx + 4]; ret
> 0x000cd369 : add [ebx], edi; or [edx + esi*8 + 0x5b], bh; ret
> 0x0002fae8 : adc [ecx + 0x120c4], eax; add [ebx + 0x5e], bl; pop edi; ret
> 0x0003197b : add [ebp + 0xd], ebx; add [ebx - 0x3fcefb3c], al; pop ebx; pop esi; ret
> 0x00139e28 : add [edx], ecx; add [ebp - 0x16898f7e], cl; jmp [ebp + 0x33]
> 0x0007424b : add [edx], ebp; push 0; push ebx; call [ebp + 0x24]
> 0x001239ec : add [ebp + 0x1b840fc0], eax; add al, [eax]; add [ebx - 0x7af0fe08], al; ret 2
> 0x00071c6b : adc [edx + 9], ebx; add [ebp - 0x37760b9b], cl; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x00088ff3 : add [ebx + 0xf660741], ecx; adc eax, [edx]; mov [edx + 7], eax; mov eax, edx; ret
> 0x00088fb3 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x000f1b9e : adc [edx + 0x14], edi; sub edx, eax; test eax, eax; cmovns eax, edx; add esp, 8; pop ebx; ret
> 0x00128776 : add [eax + 0x5a], ebx; mov eax, [ebp + 0x3c]; lea edx, [esp + 0x13c]; push edx; push esi; call [eax + 4]