ropshell> use c5ad2e079913ee2159f22ba3407ced8a (download)
name         : libc-2.24.so (i386/RAW)
base address : 0x0
total gadgets: 29470

ropshell> suggest
call
    > 0x000182ad : call eax
    > 0x0001c05c : call ebx
    > 0x00017d11 : call ecx
    > 0x00021f95 : call edx
    > 0x0000acd7 : call esi
jmp
    > 0x00120766 : push esp; ret
    > 0x000185b3 : jmp eax
    > 0x0004a8b5 : jmp ebx
    > 0x00018e9c : jmp ecx
    > 0x00001a6f : jmp edx
load mem
    > 0x000609d7 : mov eax, [edx]; ret
    > 0x0017a3fd : mov ecx, [edx]; ret
    > 0x00154466 : mov edi, [edx]; ret
    > 0x0011e940 : mov eax, [edx + 4]; ret
    > 0x0006caf9 : mov eax, [ecx]; mov [edx], eax; ret
load reg
    > 0x00023dc7 : pop eax; ret
    > 0x00017fe5 : pop ebx; ret
    > 0x000b5e97 : pop ecx; ret
    > 0x00001aa6 : pop edx; ret
    > 0x00017b46 : pop esi; ret
pop pop ret
    > 0x00023dc7 : pop eax; ret
    > 0x0013ce7b : pop ebp; pop ebx; ret
    > 0x000a08b7 : pop eax; pop edi; pop esi; ret
    > 0x0003d9ca : pop eax; pop ebx; pop esi; pop edi; ret
    > 0x0001cc47 : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x000770f1 : add esp, 0x100; ret
    > 0x000770f1 : add esp, 0x100; ret
    > 0x00018a95 : add esp, 0x24; ret
    > 0x000d61cf : add esp, 0x3c; ret
    > 0x00113cc0 : add esp, 0x4c; ret
stack pivoting
    > 0x00018b07 : xchg eax, esp; ret
    > 0x0002bbfd : mov esp, ecx; jmp edx
    > 0x0019549d : xchg esp, esi; jmp [ebp]
    > 0x0003e857 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
    > 0x000ccaac : xchg esp, eax; idiv dl; call [eax - 0x73]
syscall
    > 0x000b1d55 : call gs:[0x10]; ret
write mem
    > 0x000903ac : add [eax], edx; ret
    > 0x000903cc : add [eax], esi; ret
    > 0x0007acb8 : add [eax], edi; ret
    > 0x0003bc12 : add [ecx], eax; ret
    > 0x00094de1 : adc [ecx], edi; ret