ropshell> use 35ef4ffc9c6ad7ffd1fd8c16f14dc766 (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x212d0
total gadgets: 16861

ropshell> suggest
call
    > 0x00021b95 : call rax
    > 0x00022b9d : call rbx
    > 0x0002d6ca : call rcx
    > 0x00026951 : call rdx
    > 0x00022ea1 : call rsi
jmp
    > 0x00024ef4 : push rsp; ret
    > 0x00021ed1 : jmp rax
    > 0x00126a3d : jmp rbx
    > 0x0008f69d : jmp rcx
    > 0x0003c815 : jmp rdx
load mem
    > 0x00081b5c : mov eax, [rdx]; ret
    > 0x000e0180 : mov eax, [rdi]; ret
    > 0x000e0070 : mov rax, [rdi + 0x20]; ret
    > 0x000e0071 : mov eax, [rdi + 0x20]; ret
    > 0x0018afa3 : movzx ecx, [rsi]; sub eax, ecx; ret
load reg
    > 0x00043a78 : pop rax; ret
    > 0x0002cbc9 : pop rbx; ret
    > 0x00130866 : pop rdx; ret
    > 0x00023e8a : pop rsi; ret
    > 0x0002155f : pop rdi; ret
pop pop ret
    > 0x00130865 : pop r10; ret
    > 0x00021a43 : pop r12; pop r13; ret
    > 0x00023e85 : pop r12; pop r13; pop r14; ret
    > 0x00021558 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0002219c : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x0003ef5d : add rsp, 0x118; ret
    > 0x0003ef5d : add rsp, 0x118; ret
    > 0x0003e2d2 : add rsp, 0x28; ret
    > 0x000e0edd : add rsp, 0x38; ret
    > 0x00125057 : add rsp, 0x40; ret
stack pivoting
    > 0x00046d0e : xchg eax, esp; ret
    > 0x0011d2c7 : mov esp, edx; call rbp
    > 0x0011d8a0 : mov esp, esi; call r15
    > 0x000e3038 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
    > 0x000e3039 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
syscall
    > 0x000d29d5 : syscall ; ret
write mem
    > 0x000bb7b8 : adc [rbx], eax; ret
    > 0x00142d10 : add [rcx], edi; ret
    > 0x001531ab : adc [rdx], eax; ret
    > 0x0003e064 : adc [rdi], ecx; ret
    > 0x0010eb26 : adc [rax + 0x39], ecx; ret