ropshell> use ad7fcd1004f1445dffce85a4481462e4 (download)
name         : no_bss (x86_64/ELF)
base address : 0x4011d0
total gadgets: 47

ropshell> suggest
call
    > 0x00401747 : call [rax + 0x38c48348]; ret
jmp
    > 0x0040122c : jmp rax
load reg
    > 0x004018bc : pop rdx; ret
    > 0x0040129d : pop rbp; ret
pop pop ret
    > 0x0040129d : pop rbp; ret
sp lifting
    > 0x004017d9 : add rsp, 0x18; ret
    > 0x004017d9 : add rsp, 0x18; ret
    > 0x00401681 : add rsp, 0x28; ret
    > 0x00401749 : add rsp, 0x38; ret
stack pivoting
    > 0x004018b6 : leave ; ret
write mem
    > 0x004017d7 : add [rax + 0x18c48348], edx; ret