ropshell> use 18fc0e186ea02334f6f19f29d0a727ad (download)
name         : libc-2.28.so (x86_64/ELF)
base address : 0x22320
total gadgets: 17035

ropshell> suggest
call
    > 0x00024099 : call rax
    > 0x000232ec : call rbx
    > 0x000257f4 : call rcx
    > 0x00039e9a : call rdx
    > 0x000277ab : call rsi
jmp
    > 0x00036bc9 : push rsp; ret
    > 0x00024325 : jmp rax
    > 0x0008f254 : jmp rcx
    > 0x000323dd : jmp rdx
    > 0x0002e4bd : jmp rsi
load mem
    > 0x0007292c : mov eax, [rdx]; ret
    > 0x000c2170 : mov eax, [rdi]; ret
    > 0x000c2130 : mov rax, [rdi + 0x20]; ret
    > 0x000e1c81 : mov eax, [rdx + 8]; ret
    > 0x000c2131 : mov eax, [rdi + 0x20]; ret
load reg
    > 0x0003a758 : pop rax; ret
    > 0x0002d0a9 : pop rbx; ret
    > 0x000e8c8e : pop rcx; ret
    > 0x0004c7d2 : pop rdx; ret
    > 0x0002440e : pop rsi; ret
pop pop ret
    > 0x00106ab4 : pop r10; ret
    > 0x00023f85 : pop r12; pop r13; ret
    > 0x0002fc29 : pop r12; pop r13; pop r14; ret
    > 0x00023a58 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00024568 : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x00037d6e : add rsp, 0x118; ret
    > 0x00037d6e : add rsp, 0x118; ret
    > 0x0003a7d1 : add rsp, 0x28; ret
    > 0x0004cf85 : add rsp, 0x38; ret
    > 0x000fcad7 : add rsp, 0x40; ret
stack pivoting
    > 0x0008684d : xchg eax, esp; ret
    > 0x00037638 : mov rsp, r8; mov rbp, r9; jmp rdx
    > 0x000c5138 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x00037639 : mov esp, eax; mov rbp, r9; jmp rdx
    > 0x000c5139 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
syscall
    > 0x000b5ea5 : syscall ; ret
    > 0x00079487 : int 0x80; cmp esi, 2; cmove edx, ecx; mov [rdi], edx; ret
write mem
    > 0x000a2538 : adc [rbx], eax; ret
    > 0x001279cc : adc [rdx], ebx; ret
    > 0x00124654 : adc [rdx], ecx; ret
    > 0x000d2037 : adc [rdi], eax; ret
    > 0x000368dc : adc [rdi], ecx; ret