ropshell> use 9b8f02224b6497f2fd72ebf18d1949a3 (download)
name         : libc-2.31.so (x86_64/ELF)
base address : 0x25320
total gadgets: 17670
ropshell> suggest
call
    > 0x00026d08 : call rax
    > 0x000276bd : call rbx
    > 0x0003d7a7 : call rcx
    > 0x00026dbe : call rdx
    > 0x00028898 : call rsi
jmp
    > 0x0003afc9 : push rsp; ret
    > 0x00026fb5 : jmp rax
    > 0x00039540 : jmp rbx
    > 0x0003293f : jmp rcx
    > 0x00026b00 : jmp rdx
load mem
    > 0x0007756c : mov eax, [rdx]; ret
    > 0x000c69f0 : mov eax, [rdi]; ret
    > 0x000c69a0 : mov rax, [rdi + 0x20]; ret
    > 0x000e6161 : mov eax, [rdx + 8]; ret
    > 0x000c69a1 : mov eax, [rdi + 0x20]; ret
load reg
    > 0x0003ee88 : pop rax; ret
    > 0x00030fff : pop rbx; ret
    > 0x000cb1cd : pop rdx; ret
    > 0x0002890f : pop rsi; ret
    > 0x00026796 : pop rdi; ret
pop pop ret
    > 0x00026e9a : pop r12; ret
    > 0x000f8b69 : pop bx; pop rbp; ret
    > 0x0002890a : pop r12; pop r13; pop r14; ret
    > 0x0002678f : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0002734e : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x0003bcf7 : add rsp, 0x118; ret
    > 0x0003bcf7 : add rsp, 0x118; ret
    > 0x0003ef01 : add rsp, 0x28; ret
    > 0x00050f6d : add rsp, 0x38; ret
    > 0x001012b7 : add rsp, 0x40; ret
stack pivoting
    > 0x0004ae86 : xchg eax, esp; ret
    > 0x0007f544 : mov esp, eax; mov rax, r12; pop r12; ret
    > 0x0003ba38 : mov rsp, r8; mov rbp, r9; jmp rdx
    > 0x000c9aeb : lea rsp, [rbp - 0x10]; pop r12; pop r13; pop rbp; ret
    > 0x000aae0f : lea esp, [rbx + 0x145fff7]; dec [rax - 0x7d]; ret
syscall
    > 0x000580da : syscall ; ret
write mem
    > 0x0012b1cc : adc [rax], ebx; ret
    > 0x0012a8cc : adc [rax], ecx; ret
    > 0x0012a8dc : adc [rax], edx; ret
    > 0x000a7948 : adc [rbx], eax; ret
    > 0x00127eb4 : adc [rdx], ecx; ret