ropshell> use d371da546786965fe0ee40147ffef716 (download)
name         : libc-2.31-ubuntu-20.04.so (i386/RAW)
base address : 0x0
total gadgets: 15793
ropshell> suggest "load mem"
> 0x00088710 : mov eax, [edx]; ret
> 0x000e1464 : mov eax, [edi]; ret
> 0x001ae286 : mov edi, [edx]; ret
> 0x00105bc1 : mov eax, [edx + 8]; ret
> 0x000e1415 : mov eax, [edi + 0x20]; ret
> 0x00187de3 : movzx ecx, [esi]; sub eax, ecx; ret
> 0x000afa14 : movzx edx, [esi]; sub eax, edx; ret
> 0x0002703c : mov edx, [eax]; call ebx
> 0x0011df33 : mov edi, [eax]; call ebx
> 0x0011dafc : mov edi, [esi]; call ebx
> 0x0011cce0 : mov edi, [ebp]; call ebx
> 0x00180fbf : movzx edx, [esi + ecx]; sub eax, edx; ret
> 0x000a1a11 : mov edi, [ebx + 0x48]; call eax
> 0x0004a43a : mov edi, [ebp + 8]; call eax
> 0x0008a8cf : mov eax, [ecx]; dec eax; add esp, 8; pop ebx; pop ebp; ret
> 0x000c038e : mov edx, [edi]; xor eax, eax; test edx, edx; sete al; ret
> 0x00110284 : mov eax, [esi]; mov [edi + 0x108], eax; xor eax, eax; ret
> 0x00153a2b : mov eax, [ebx + 0x60]; call [eax + 8]
> 0x000f14b0 : mov eax, [ebp + 0x4c]; dec eax; add esp, 8; pop ebx; pop ebp; ret
> 0x0016e44e : mov ecx, [ebp + 1]; fnstcw [esi]; inc ecx; jmp ecx
> 0x0012ff87 : mov edx, [edi + 0x28]; xor eax, eax; test edx, edx; sete al; ret
> 0x000ad4f4 : movzx ecx, [esi + edx]; movzx eax, [edi + edx]; sub eax, ecx; ret
> 0x0008ff3c : mov edx, [eax + 0x18]; dec eax; mov [eax + 0x20], edx; pop ebx; ret
> 0x0012ee44 : mov edi, [edx + 0x50]; dec eax; mov esi, edx; call eax
> 0x000b6bd9 : mov eax, [ecx + 3]; mov [edx + 3], eax; dec eax; mov eax, edi; ret
> 0x000581e2 : mov ecx, [edx + 0x30]; dec eax; mov edx, [edx + 0x88]; xor eax, eax; ret
> 0x00135400 : mov ebp, [ecx + 0x6401000b]; inc ebp; mov [eax], ecx; dec eax; add esp, 0x18; ret
> 0x000373b5 : mov eax, [esi + 0x70]; dec eax; arpl di, di; mov eax, [eax + edi*4]; ret
> 0x00153a09 : mov esi, [ebx + 0x88]; dec esp; mov edi, edi; call [eax + 0x28]
> 0x0011d150 : mov esi, [ebx]; dec ecx; mov ebp, ebx; dec eax; mov edi, ebp; inc ecx; call esp
> 0x00154751 : mov edi, [ebx]; dec eax; mov eax, [edi + 8]; call [eax + 0x20]
> 0x0008bbed : mov edx, [ebx + 0x40]; dec eax; mov edi, ebx; dec eax; sub edx, esi; call [eax + 0x70]
> 0x00151ddf : mov esi, [eax + 0x40]; mov edx, [esi + 0x1c8]; dec eax; add esi, 0x38; jmp [eax + 0x18]
> 0x00154744 : mov eax, [ebx]; dec eax; mov edi, [eax]; dec eax; mov eax, [edi + 0x38]; call [eax + 0x20]
> 0x0012fc1d : mov edx, [ecx + 0x18]; movdqu xmm7, xmm[ecx + 0x30]; mov [ebp - 0x80], edx; dec esp; mov edx, ebp; movups xmm[ebp - 0x78], xmm7; call eax