ropshell> use 7b29ee082c1808be4e02e52f0290eb3d (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x1f4a0
total gadgets: 18413
ropshell> suggest "write mem"
> 0x000c3ba8 : add [rcx], edi; ret
> 0x000606bb : add [rcx], ebp; ret
> 0x00034624 : adc [rdi], ecx; ret
> 0x00141d41 : add [rax + 0x28d4802], ecx; ret
> 0x000bf703 : add [rax + 1], edi; ret
> 0x0008ed76 : add [rbx + 0x294803e0], eax; ret
> 0x0009bdcf : add [rcx + 0x39], eax; ret
> 0x0008ebf6 : add [rbp + 0x79c689c0], eax; ret
> 0x000af90a : add [rbp + 1], ecx; ret
> 0x00085031 : add [r8 + r8], rcx; ret
> 0x000d2b1e : add [rbp + 7], esi; rep ; ret
> 0x000612b9 : add [rcx], esi; rol [rbp - 0x3f60f025], 0x29; ret
> 0x000f3b0f : add [r8], eax; mov rax, rdi; pop rbx; ret
> 0x00092374 : add [rdx + 0x48028801], ecx; mov eax, edi; ret
> 0x001144c0 : add [rdi + 0x28], edx; mov eax, 1; ret
> 0x000c1a44 : add [rbx], edi; adc al, -0x42; cmove eax, ecx; ret
> 0x000414e1 : adc [rcx], eax; add [rax], al; pop rbx; ret
> 0x0004ea8c : add [rcx], ebx; jmp [rsi - 0x3f]
> 0x000345af : adc [rdi], eax; and rax, rdx; movq xmm0, rax; ret
> 0x00132502 : add [rbx + 0x157890e], ecx; mov [rdi], ecx; ret
> 0x000e0da3 : add [rbx + 0x2c], edx; add [rax - 0x76b7ffc8], al; ret
> 0x0010739b : add [rbx], ecx; sub al, [rax]; add rsp, 8; ret
> 0x0008d3c2 : add [rcx], rsi; rol [rdx + rdx*8 - 0x3ebaf0b8], -0xd; ret
> 0x000ed4dd : add [rbx + 0x38], rbp; mov rax, rbp; pop rbx; pop rbp; pop r12; ret
> 0x000ed4de : add [rbx + 0x38], ebp; mov rax, rbp; pop rbx; pop rbp; pop r12; ret
> 0x00113f26 : adc [rdx + 0x1f], esi; cmp eax, 2; sete al; movzx eax, al; ret
> 0x00084a89 : add [rax], r8; lea rdx, [rip - 0x4e3]; cmove rax, rdx; add rsp, 8; ret
> 0x0013f81d : add [rdi], rcx; test ecx, [rbx + 3]; add [rax], al; ret
> 0x00038c31 : add [r8], rax; add [rax - 0x75], cl; and al, 8; add rsp, 0x18; ret
> 0x00114558 : add [rdi + 0x28], esi; mov rax, [rdi + 0x18]; pop rbx; pop rbp; pop r12; ret
> 0x000f2c68 : add [rbx], ebp; add bh, dh; fsub [rcx + rcx*4 + 2]; or rax, -1; ret
> 0x000f2cfd : add [ebx], ebp; add bh, dh; fsub [rcx + rcx*4 + 2]; or rax, -1; ret
> 0x000b93c0 : adc [rsi], eax; add [rax], al; lea rax, [rip + 0xa4831]; movsxd rdx, [rax + rbx*4]; add rax, rdx; jmp rax
> 0x0014518d : add [rax + 0x48], esi; add esi, edx; add rdi, rdx; lea r11, [rip + 0x25ad3]; movsxd rcx, [r11 + rdx*4]; add rcx, r11; jmp rcx
> 0x000333d6 : add [rcx + 0xf18245c], r9; xchg [rsi + 0x48000002], ecx; lea ebx, [rip + 0x123e0f]; movsxd rax, [rbx + rax*4]; add rax, rbx; jmp rax