ropshell> use 7b29ee082c1808be4e02e52f0290eb3d (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x1f4a0
total gadgets: 18413

ropshell> suggest "stack pivoting"
> 0x0003a307 : xchg eax, esp; ret
> 0x00034ff8 : mov rsp, r8; mov rbp, r9; jmp rdx
> 0x000372fd : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
> 0x00034ff9 : mov esp, eax; mov rbp, r9; jmp rdx
> 0x000372fe : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
> 0x000694b4 : mov rsp, rbx; lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x000694b5 : mov esp, ebx; lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x000a81ff : mov esp, esi; mov rsi, rdx; mov rdi, r12; push rbp; push rbx; sub rsp, 8; call r13
> 0x0010726d : push rdi; pop rsp; lea rsi, [rdi + 0x48]; mov rdi, rax; mov rcx, [rcx + 0x18]; jmp rcx
> 0x0011294f : lea esp, [rbx + 0x10]; mov [rbx + 0x10], 0; mov rdi, r12; call [rax + 0x28]
> 0x000763d3 : mov esp, edx; push rbp; mov rbp, rsi; push rbx; mov rax, [rdi + 0xd8]; mov rbx, rdi; call [rax + 0x60]
> 0x0003ea62 : leave ; ret