ropshell> use e52edf9e16b718131ae16fb22514b44c (download)
name         : libc-2.15.so (i386/ELF)
base address : 0x16f70
total gadgets: 15591
ropshell> suggest "load mem"
> 0x00073bf0 : movzx eax, [edx]; pop esi; ret
> 0x0001af9b : mov eax, [ecx + 0x36c0]; ret
> 0x0013ec24 : movzx eax, [edx + 1]; sub eax, ecx; ret
> 0x0010357f : mov ebp, [ecx + 0xc]; jmp edx
> 0x0013c432 : mov ecx, [eax]; mov [edx], ecx; pop ebx; ret
> 0x000a935f : mov eax, [ebx + 0x3818]; add esp, 8; pop ebx; ret
> 0x0011a464 : mov edi, [eax + 0x74]; idiv edi; jmp esi
> 0x0006e422 : mov eax, [ecx]; add ecx, 4; mov [edx], ecx; ret
> 0x0003f8d7 : mov ecx, [eax + 0x3c]; mov eax, [eax + 0x40]; ret
> 0x00130329 : movzx ecx, [esi + ecx]; sub eax, ecx; pop esi; pop edi; ret
> 0x000eb908 : mov eax, [esi]; mov [esp], eax; call edi
> 0x00098675 : mov eax, [ebp]; mov [esp], eax; call edi
> 0x0008d901 : mov edx, [esi]; mov [edi], dx; pop edi; pop esi; pop ebx; ret
> 0x00017782 : mov eax, [ebp + 0xc]; call [eax]
> 0x000bb9d8 : mov ecx, [ebp + 0x10]; call [ecx + 0x10]
> 0x000f1236 : mov eax, [ebx]; add [ecx + 0xb1dbbc3], al; add [ecx - 0x76f3dba4], cl; ret
> 0x0006a058 : mov edx, [eax + 0xc]; mov [eax + 0x10], edx; add esp, 0x1c; ret
> 0x000fab68 : mov edx, [esi + 0x30]; mov [esp], edx; call eax
> 0x0010357c : mov edi, [ecx + 8]; mov ebp, [ecx + 0xc]; jmp edx
> 0x00060479 : mov ebp, [eax + 0x1fffffe]; ror [ecx - 0x1037b], 1; jmp [ebp - 0x75]
> 0x000d89f4 : movzx edx, [eax]; mov eax, [esp + 8]; mov [eax], dx; xor eax, eax; ret
> 0x00111a8e : mov eax, [esi + 0x10]; mov [esp], edi; call [eax + 0x10]
> 0x0001e1fc : mov eax, [edi + 0xc]; mov [esp], eax; call [edi + 4]
> 0x000c5199 : mov esi, [ebp + ebx]; add [ebx - 0x6f6d], cl; dec [ecx + 0x24c4830a]; pop ebx; pop esi; ret
> 0x0006d610 : mov ebp, [esi + 0x54]; mov [esp], ebp; call [ebp + 0x10]
> 0x000d6e18 : movzx ebp, [edx + 4]; mov ecx, ebx; sub ecx, [ebx + ebp*4 - 0xcc1cc]; jmp ecx
> 0x0012ea63 : mov edx, [ebx + 0x3930]; mov eax, esi; ror edx, 9; xor edx, gs:[0x18]; call edx
> 0x00103579 : mov esi, [ecx + 4]; mov edi, [ecx + 8]; mov ebp, [ecx + 0xc]; jmp edx
> 0x000915f0 : mov ecx, [esi]; mov [eax + 4], dh; mov [eax], ecx; mov eax, [esp + 8]; pop esi; ret
> 0x00032aff : mov edx, [ecx + 8]; ror eax, 9; xor eax, gs:[0x18]; mov [esp], edx; call eax
> 0x0003f8d1 : mov ebx, [eax + 0x34]; mov edx, [eax + 0x38]; mov ecx, [eax + 0x3c]; mov eax, [eax + 0x40]; ret
> 0x001199b0 : mov ecx, [edx + 0x28]; mov [eax + 4], ecx; mov edx, [edx + 0x2c]; mov [eax + 8], edx; ret
> 0x001127b8 : mov edx, [edi + 4]; mov [esp], edi; mov [esp + 0x2c], eax; call [edx + 0x10]
> 0x0006d910 : mov edx, [ebp + 0x54]; mov [esp + 0x48], edx; mov [esp], edx; call [edx + 0x10]
> 0x00103577 : mov ebx, [ecx]; mov esi, [ecx + 4]; mov edi, [ecx + 8]; mov ebp, [ecx + 0xc]; jmp edx
> 0x000ce0ee : mov esi, [edx + 0xc]; mov [ecx + 0x10], esi; mov eax, [eax + 0x10]; mov [edx + 0x10], eax; xor eax, eax; pop esi; ret
> 0x0002dd10 : mov esi, [eax + 4]; mov edi, [eax + 8]; mov ebp, [eax + 0xc]; mov eax, [esp + 8]; mov esp, ecx; jmp edx
> 0x0001d78f : mov eax, [edi]; mov [esp + 4], ebp; mov [esp + 8], eax; mov eax, [esi + 0xc]; mov [esp], eax; call [esi + 4]
> 0x0002dd0e : mov ebx, [eax]; mov esi, [eax + 4]; mov edi, [eax + 8]; mov ebp, [eax + 0xc]; mov eax, [esp + 8]; mov esp, ecx; jmp edx