ropshell> use a3e78b9d154d9d0936d3a1fda1743479 (download)
name         : libc-2.23_64.so (x86_64/ELF)
base address : 0x1f8b0
total gadgets: 17522

ropshell> suggest
call
    > 0x0002082e : call rax
    > 0x0002185d : call rbx
    > 0x0002b398 : call rcx
    > 0x00039fce : call rdx
    > 0x00021be3 : call rsi
jmp
    > 0x00023ad1 : push rsp; ret
    > 0x00020b91 : jmp rax
    > 0x0002be4a : jmp rcx
    > 0x000210ba : jmp rdx
    > 0x0002e8f4 : jmp rsi
load mem
    > 0x000705cc : mov eax, [rdx]; ret
    > 0x000c7db0 : mov eax, [rdi]; ret
    > 0x000720a7 : mov eax, [rsi]; pop rbx; ret
    > 0x0013b5f2 : mov rax, [rdi + 0x18]; ret
    > 0x0013b5f3 : mov eax, [rdi + 0x18]; ret
load reg
    > 0x00033544 : pop rax; ret
    > 0x0002a69a : pop rbx; ret
    > 0x000fc3e2 : pop rcx; ret
    > 0x001144b6 : pop rdx; ret
    > 0x000202e8 : pop rsi; ret
pop pop ret
    > 0x001144b5 : pop r10; ret
    > 0x000206c2 : pop r12; pop r13; ret
    > 0x000202e3 : pop r12; pop r13; pop r14; ret
    > 0x000210fb : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0002024f : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x0008db8e : add rsp, 0x100; ret
    > 0x0008db8e : add rsp, 0x100; ret
    > 0x00034ad2 : add rsp, 0x28; ret
    > 0x000c8af6 : add rsp, 0x38; ret
    > 0x00104577 : add rsp, 0x408; ret
stack pivoting
    > 0x0004727e : xchg eax, esp; ret
    > 0x000398c1 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x000398c2 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x000352e9 : mov rsp, r8; mov rbp, r9; nop ; jmp rdx
    > 0x000352ea : mov esp, eax; mov rbp, r9; nop ; jmp rdx
syscall
    > 0x000bb7c5 : syscall ; ret
write mem
    > 0x0008d8f1 : add [rax], edi; ret
    > 0x000e754b : add [rcx], edi; ret
    > 0x000348c4 : adc [rdi], ecx; ret
    > 0x0012311f : add [rdx], eax; pop rbx; ret
    > 0x0016a401 : add [rax + 0x28d4802], ecx; ret