ropshell> use 5f4f99671c3a200f7789dbb5307b04bb (download)
name         : libc-2.29.so (x86_64/ELF)
base address : 0x25320
total gadgets: 17477
ropshell> suggest
call
    > 0x00026bb9 : call rax
    > 0x0002796d : call rbx
    > 0x0003ba17 : call rcx
    > 0x000305f7 : call rdx
    > 0x000282f3 : call rsi
jmp
    > 0x00039339 : push rsp; ret
    > 0x000268ac : jmp rax
    > 0x000655f6 : jmp rcx
    > 0x000378c6 : jmp rdx
    > 0x000bbe19 : jmp rsi
load mem
    > 0x00074e7c : mov eax, [rdx]; ret
    > 0x000c3260 : mov eax, [rdi]; ret
    > 0x000c3220 : mov rax, [rdi + 0x20]; ret
    > 0x000e2bd1 : mov eax, [rdx + 8]; ret
    > 0x000c3221 : mov eax, [rdi + 0x20]; ret
load reg
    > 0x0003cff8 : pop rax; ret
    > 0x0002fb33 : pop rbx; ret
    > 0x000e9bbe : pop rcx; ret
    > 0x00107545 : pop rdx; ret
    > 0x00026aa9 : pop rsi; ret
pop pop ret
    > 0x00107544 : pop r10; ret
    > 0x000f5259 : pop bx; pop rbp; ret
    > 0x00026aa4 : pop r12; pop r13; pop r14; ret
    > 0x00026587 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00027096 : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x0003a097 : add rsp, 0x118; ret
    > 0x0003a097 : add rsp, 0x118; ret
    > 0x0003d071 : add rsp, 0x28; ret
    > 0x0004efbd : add rsp, 0x38; ret
    > 0x000fd5d7 : add rsp, 0x40; ret
stack pivoting
    > 0x0003fc36 : xchg eax, esp; ret
    > 0x0007cb74 : mov esp, eax; mov rax, r12; pop r12; ret
    > 0x00039dc8 : mov rsp, r8; mov rbp, r9; jmp rdx
    > 0x000c622b : lea rsp, [rbp - 0x10]; pop r12; pop r13; pop rbp; ret
    > 0x000c622c : lea esp, [rbp - 0x10]; pop r12; pop r13; pop rbp; ret
syscall
    > 0x000b7415 : syscall ; ret
write mem
    > 0x000a3f78 : adc [rbx], eax; ret
    > 0x0006bf8d : add [rcx], eax; ret
    > 0x0012775c : adc [rdx], ebx; ret
    > 0x00124404 : adc [rdx], ecx; ret
    > 0x00115e5e : add [rdx], eax; pop rbx; ret