ropshell> use 9ee1a1aa1bbd6bf8d7f3a90c0ea5d135 (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x28700
total gadgets: 16847

ropshell> suggest
call
    > 0x00029d8e : call rax
    > 0x0002aa9d : call rbx
    > 0x00029e66 : call rcx
    > 0x00036c06 : call rdx
    > 0x0002b8ba : call rsi
jmp
    > 0x0004181d : push rsp; ret
    > 0x0002a147 : jmp rax
    > 0x000379d4 : jmp rcx
    > 0x0003fc7a : jmp rdx
    > 0x000519d1 : jmp rsi
load mem
    > 0x00081dc0 : mov eax, [rdx]; ret
    > 0x000e6674 : mov eax, [rdi]; ret
    > 0x0008f464 : mov rax, [rdi + 0x68]; ret
    > 0x00109551 : mov eax, [rdx + 8]; ret
    > 0x00151e84 : mov eax, [rdi + 0x20]; ret
load reg
    > 0x00045eb0 : pop rax; ret
    > 0x00035dd1 : pop rbx; ret
    > 0x0003d1ee : pop rcx; ret
    > 0x000a5722 : pop rdx; ret 0x13
    > 0x0002be51 : pop rsi; ret
pop pop ret
    > 0x00035731 : pop r12; ret
    > 0x00041c48 : pop r12; pop r13; ret
    > 0x0002be4c : pop r12; pop r13; pop r14; ret
    > 0x0002a3de : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0011dd6c : pop r11; pop rbp; pop r12; pop r13; pop r14; ret
sp lifting
    > 0x00121a8b : add rsp, 0x1018; ret
    > 0x00121a8b : add rsp, 0x1018; ret
    > 0x00149aac : add rsp, 0x218; ret
    > 0x0005a44e : add rsp, 0x38; ret
    > 0x00129c1b : add rsp, 0x40; ret
stack pivoting
    > 0x0005a120 : mov rsp, rdx; ret
    > 0x0003653a : xchg eax, esp; ret
    > 0x0005a121 : mov esp, edx; ret
    > 0x0008a201 : mov esp, eax; mov rax, r12; pop r12; ret
    > 0x000e9163 : lea rsp, [rbp - 0x10]; pop r12; pop r13; pop rbp; ret
syscall
    > 0x00091316 : syscall ; ret
write mem
    > 0x00083548 : adc [rax], ecx; ret
    > 0x000c4b0c : adc [rcx], eax; ret
    > 0x0016626b : adc [rcx], ebx; ret
    > 0x0016596b : adc [rcx], edx; ret
    > 0x00092a4f : add [rcx], edi; ret