ropshell> use 8c0d248ea33e6ef17b759fa5d81dda9e (download)
name         : libc.so.6 (i386/RAW)
base address : 0x0
total gadgets: 15496
ropshell> suggest
call
    > 0x0002082e : call eax
    > 0x0002185d : call ebx
    > 0x0002b398 : call ecx
    > 0x00039fce : call edx
    > 0x00021be3 : call esi
jmp
    > 0x00023ad1 : push esp; ret
    > 0x00020b91 : jmp eax
    > 0x00189267 : jmp ebx
    > 0x0002be4a : jmp ecx
    > 0x00001b63 : jmp edx
load mem
    > 0x000705cc : mov eax, [edx]; ret
    > 0x000c8960 : mov eax, [edi]; ret
    > 0x001840e6 : mov edi, [edx]; ret
    > 0x000720a7 : mov eax, [esi]; pop ebx; ret
    > 0x0013c1e3 : mov eax, [edi + 0x18]; ret
load reg
    > 0x00033544 : pop eax; ret
    > 0x0002a69a : pop ebx; ret
    > 0x00001b92 : pop edx; ret
    > 0x000202e8 : pop esi; ret
    > 0x00021102 : pop edi; ret
pop pop ret
    > 0x00033544 : pop eax; ret
    > 0x0006d128 : pop ebp; pop ebp; ret
    > 0x0001f92e : pop eax; pop ebx; pop ebp; ret
sp lifting
    > 0x0008e73f : add esp, 0x100; ret
    > 0x0008e73f : add esp, 0x100; ret
    > 0x00034ad3 : add esp, 0x28; ret
    > 0x000c96a7 : add esp, 0x38; ret
    > 0x00105168 : add esp, 0x408; ret
stack pivoting
    > 0x0004727e : xchg eax, esp; ret
    > 0x00195d19 : xchg esp, edi; jmp edx
    > 0x00189585 : mov esp, esi; jmp edx
    > 0x001957c8 : push esi; pop esp; cld ; jmp esi
    > 0x0007f0c4 : xchg edi, esp; add al, 0; add dh, dh; ret
write mem
    > 0x0008e4a1 : add [eax], edi; ret
    > 0x000e812b : add [ecx], edi; ret
    > 0x0019e5a9 : add [edx], ecx; ret
    > 0x000348c4 : adc [edi], ecx; ret
    > 0x00123d0f : add [edx], eax; pop ebx; ret