ropshell> use 522a2681d9ccad1ed953f8f61f2f42d1 (download)
name         : libc-2.26.so_cc8df6278e095fcc4ca8a98e1f1c69c04db30a4c (x86_64/ELF)
base address : 0x20820
total gadgets: 16500
ropshell> suggest
call
    > 0x000211bf : call rax
    > 0x000221ad : call rbx
    > 0x00022c12 : call rcx
    > 0x0003be96 : call rdx
    > 0x00022542 : call rsi
jmp
    > 0x00024534 : push rsp; ret
    > 0x00021521 : jmp rax
    > 0x0004a99a : jmp rcx
    > 0x0002d80d : jmp rdx
    > 0x0002cf1d : jmp rsi
load mem
    > 0x0007954c : mov eax, [rdx]; ret
    > 0x000d45c0 : mov eax, [rdi]; ret
    > 0x00150312 : mov rax, [rdi + 0x18]; ret
    > 0x00150313 : mov eax, [rdi + 0x18]; ret
    > 0x0017b063 : movzx ecx, [rsi]; sub eax, ecx; ret
load reg
    > 0x000234c3 : pop rax; ret
    > 0x00035458 : pop rbx; ret
    > 0x00123166 : pop rdx; ret
    > 0x00020a0b : pop rsi; ret
    > 0x00020b8b : pop rdi; ret
pop pop ret
    > 0x00123165 : pop r10; ret
    > 0x0002104f : pop r12; pop r13; ret
    > 0x00020a06 : pop r12; pop r13; pop r14; ret
    > 0x00020b84 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x000217f4 : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x000370d1 : add rsp, 0x118; ret
    > 0x000370d1 : add rsp, 0x118; ret
    > 0x00036426 : add rsp, 0x28; ret
    > 0x000d534d : add rsp, 0x38; ret
    > 0x00117f67 : add rsp, 0x40; ret
stack pivoting
    > 0x000285ce : xchg eax, esp; ret
    > 0x0010fe47 : mov esp, edx; call rbp
    > 0x0003b77f : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x0003b780 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x00036ec9 : mov rsp, r8; mov rbp, r9; nop ; jmp rdx
syscall
    > 0x000c7fd5 : syscall ; ret
write mem
    > 0x000b2578 : adc [rbx], eax; ret
    > 0x000f54ea : add [rcx], edi; ret
    > 0x000361c4 : adc [rdi], ecx; ret
    > 0x0013380f : add [rdx], eax; pop rbx; ret
    > 0x00171671 : add [rax + 0x28d4802], ecx; ret