ropshell> use da630a8a6bbc5fce09f3356cb8b148f8 (download)
name         : libc-2.24.so (i386/RAW)
base address : 0x0
total gadgets: 29589

ropshell> suggest
call
    > 0x0001829d : call eax
    > 0x0001c04c : call ebx
    > 0x00017d01 : call ecx
    > 0x00021f85 : call edx
    > 0x0000acd7 : call esi
jmp
    > 0x001207d6 : push esp; ret
    > 0x000185a3 : jmp eax
    > 0x0004a8a5 : jmp ebx
    > 0x00018e8c : jmp ecx
    > 0x00001a6f : jmp edx
load mem
    > 0x000609c7 : mov eax, [edx]; ret
    > 0x0017a4dd : mov ecx, [edx]; ret
    > 0x001544e6 : mov edi, [edx]; ret
    > 0x0011e9b0 : mov eax, [edx + 4]; ret
    > 0x0006cae9 : mov eax, [ecx]; mov [edx], eax; ret
load reg
    > 0x0001b497 : pop eax; ret
    > 0x00017fd5 : pop ebx; ret
    > 0x000b5f07 : pop ecx; ret
    > 0x00001aa6 : pop edx; ret
    > 0x00017b36 : pop esi; ret
pop pop ret
    > 0x0001b497 : pop eax; ret
    > 0x0013ceeb : pop ebp; pop ebx; ret
    > 0x000a08a7 : pop eax; pop edi; pop esi; ret
    > 0x0003d9ba : pop eax; pop ebx; pop esi; pop edi; ret
    > 0x0001cc37 : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x000770e1 : add esp, 0x100; ret
    > 0x000770e1 : add esp, 0x100; ret
    > 0x00018a85 : add esp, 0x24; ret
    > 0x000d623f : add esp, 0x3c; ret
    > 0x00113d30 : add esp, 0x4c; ret
stack pivoting
    > 0x00018af7 : xchg eax, esp; ret
    > 0x0001e961 : xchg esp, ecx; ret
    > 0x0002bbed : mov esp, ecx; jmp edx
    > 0x00166d85 : mov esp, ebp; call esp
    > 0x0003e847 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
syscall
    > 0x000b1dc5 : call gs:[0x10]; ret
write mem
    > 0x0009039c : add [eax], edx; ret
    > 0x000903bc : add [eax], esi; ret
    > 0x0007aca8 : add [eax], edi; ret
    > 0x0003bc02 : add [ecx], eax; ret
    > 0x00094dd1 : adc [ecx], edi; ret