ropshell> use b0097c8a9284b03b412ff171c3d3c9cc (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x1f8b0
total gadgets: 17576
ropshell> suggest
call
    > 0x0002083e : call rax
    > 0x0002186d : call rbx
    > 0x0002b3a8 : call rcx
    > 0x00039fde : call rdx
    > 0x00021bf3 : call rsi
jmp
    > 0x00023ae1 : push rsp; ret
    > 0x00020ba1 : jmp rax
    > 0x0002be5a : jmp rcx
    > 0x000210ca : jmp rdx
    > 0x0002e904 : jmp rsi
load mem
    > 0x000705dc : mov eax, [rdx]; ret
    > 0x000c89e0 : mov eax, [rdi]; ret
    > 0x000720b7 : mov eax, [rsi]; pop rbx; ret
    > 0x0013c2e2 : mov rax, [rdi + 0x18]; ret
    > 0x0013c2e3 : mov eax, [rdi + 0x18]; ret
load reg
    > 0x0003a738 : pop rax; ret
    > 0x0002a6aa : pop rbx; ret
    > 0x001151a6 : pop rdx; ret
    > 0x000202f8 : pop rsi; ret
    > 0x00021112 : pop rdi; ret
pop pop ret
    > 0x001151a5 : pop r10; ret
    > 0x000206d2 : pop r12; pop r13; ret
    > 0x000202f3 : pop r12; pop r13; pop r14; ret
    > 0x0002110b : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00020264 : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x0008e7be : add rsp, 0x100; ret
    > 0x0008e7be : add rsp, 0x100; ret
    > 0x00034ae2 : add rsp, 0x28; ret
    > 0x000c9726 : add rsp, 0x38; ret
    > 0x00105267 : add rsp, 0x408; ret
stack pivoting
    > 0x0004728e : xchg eax, esp; ret
    > 0x000398d1 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x0007f0d4 : xchg edi, esp; add al, 0; add dh, dh; ret
    > 0x000398d2 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x000352f9 : mov rsp, r8; mov rbp, r9; nop ; jmp rdx
syscall
    > 0x000bc3f5 : syscall ; ret
write mem
    > 0x0008e521 : add [rax], edi; ret
    > 0x000e822b : add [rcx], edi; ret
    > 0x000348d4 : adc [rdi], ecx; ret
    > 0x00123e0f : add [rdx], eax; pop rbx; ret
    > 0x0016b0f1 : add [rax + 0x28d4802], ecx; ret