ropshell> use 60020614789003b892b279a3544fd4a8 (download)
name         : libc.so.6 (i386/ELF)
base address : 0x18690
total gadgets: 16657

ropshell> suggest
call
    > 0x00018fc1 : call eax
    > 0x0001e0ff : call ebx
    > 0x0001a6f4 : call ecx
    > 0x00019041 : call edx
    > 0x00019dce : call esi
jmp
    > 0x00078e3e : push esp; ret
    > 0x000192e3 : jmp eax
    > 0x00056cea : jmp ebx
    > 0x00019800 : jmp ecx
    > 0x0002ab3f : jmp edx
load mem
    > 0x00068717 : mov eax, [edx]; ret
    > 0x001329b8 : mov eax, [edx + 4]; ret
    > 0x00074eb3 : mov eax, [ecx]; mov [edx], eax; ret
    > 0x00074ee9 : mov eax, [ecx + 8]; sub eax, edx; ret
    > 0x00107e02 : mov ebp, [ecx + 0xc]; jmp edx
load reg
    > 0x00024d37 : pop eax; ret
    > 0x00018d05 : pop ebx; ret
    > 0x0002d36c : pop edx; ret
    > 0x00018807 : pop esi; ret
    > 0x0001871b : pop edi; ret
pop pop ret
    > 0x00024d37 : pop eax; ret
    > 0x0015407b : pop ebp; pop ebx; ret
    > 0x000ac3c7 : pop eax; pop edi; pop esi; ret
    > 0x0004014a : pop eax; pop ebx; pop esi; pop edi; ret
    > 0x0001c30c : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x00133b51 : add esp, 0x10; ret
    > 0x00133b51 : add esp, 0x10; ret
    > 0x00162cd2 : add esp, 0x20; ret
    > 0x000effc0 : add esp, 0x3c; ret
    > 0x000e7645 : add esp, 0x4c; ret
stack pivoting
    > 0x0003e20a : xchg eax, esp; ret
    > 0x0002d43d : mov esp, ecx; jmp edx
    > 0x00040f18 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
    > 0x000c238f : lea esp, [ebx + edi*8 - 1]; call [ebx - 0x18]
    > 0x00059769 : lea esp, [edx + edi*8 - 1]; call [esi - 0x18]
syscall
    > 0x000bec25 : call gs:[0x10]; ret
write mem
    > 0x0009725c : add [eax], edx; ret
    > 0x0009727c : add [eax], esi; ret
    > 0x00081d80 : add [eax], edi; ret
    > 0x0005aab5 : add [ecx], eax; ret
    > 0x0003ecb2 : add [ecx], edi; ret