ropshell> use 50390b2ae8aaa73c47745040f54e602f (download)
name         : libc-2.27.so (x86_64/ELF)
base address : 0x212d0
total gadgets: 16893

ropshell> suggest
call
    > 0x00021b95 : call rax
    > 0x00022b8d : call rbx
    > 0x0002d64a : call rcx
    > 0x0002c9c3 : call rdx
    > 0x00022e91 : call rsi
jmp
    > 0x00024e74 : push rsp; ret
    > 0x00021ed1 : jmp rax
    > 0x00133ebd : jmp rbx
    > 0x00099e22 : jmp rcx
    > 0x0003c765 : jmp rdx
load mem
    > 0x00081aec : mov eax, [rdx]; ret
    > 0x000e0120 : mov eax, [rdi]; ret
    > 0x000e0010 : mov rax, [rdi + 0x20]; ret
    > 0x000e0011 : mov eax, [rdi + 0x20]; ret
    > 0x0018ad33 : movzx ecx, [rsi]; sub eax, ecx; ret
load reg
    > 0x000439c8 : pop rax; ret
    > 0x0002cb49 : pop rbx; ret
    > 0x0003eb0b : pop rcx; ret
    > 0x001306b6 : pop rdx; ret
    > 0x00023e6a : pop rsi; ret
pop pop ret
    > 0x001306b5 : pop r10; ret
    > 0x00021a43 : pop r12; pop r13; ret
    > 0x00023e65 : pop r12; pop r13; pop r14; ret
    > 0x00021558 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0002219c : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x0003eead : add rsp, 0x118; ret
    > 0x0003eead : add rsp, 0x118; ret
    > 0x0003e222 : add rsp, 0x28; ret
    > 0x000e0e7d : add rsp, 0x38; ret
    > 0x00124ea7 : add rsp, 0x40; ret
stack pivoting
    > 0x00046c5e : xchg eax, esp; ret
    > 0x0011d1a7 : mov esp, edx; call rbp
    > 0x0011d780 : mov esp, esi; call r15
    > 0x000e2fd8 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x000e2fd9 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
syscall
    > 0x000d2975 : syscall ; ret
write mem
    > 0x000bb748 : adc [rbx], eax; ret
    > 0x00142b40 : add [rcx], edi; ret
    > 0x00152fab : adc [rdx], eax; ret
    > 0x0003dfb4 : adc [rdi], ecx; ret
    > 0x00181321 : add [rax + 0x28d4802], ecx; ret