ropshell> use 9b8f02224b6497f2fd72ebf18d1949a3 (download) name : libc-2.31.so (x86_64/ELF) base address : 0x25320 total gadgets: 17670
ropshell> suggest call > 0x00026d08 : call rax > 0x000276bd : call rbx > 0x0003d7a7 : call rcx > 0x00026dbe : call rdx > 0x00028898 : call rsi jmp > 0x0003afc9 : push rsp; ret > 0x00026fb5 : jmp rax > 0x00039540 : jmp rbx > 0x0003293f : jmp rcx > 0x00026b00 : jmp rdx load mem > 0x0007756c : mov eax, [rdx]; ret > 0x000c69f0 : mov eax, [rdi]; ret > 0x000c69a0 : mov rax, [rdi + 0x20]; ret > 0x000e6161 : mov eax, [rdx + 8]; ret > 0x000c69a1 : mov eax, [rdi + 0x20]; ret load reg > 0x0003ee88 : pop rax; ret > 0x00030fff : pop rbx; ret > 0x000cb1cd : pop rdx; ret > 0x0002890f : pop rsi; ret > 0x00026796 : pop rdi; ret pop pop ret > 0x00026e9a : pop r12; ret > 0x000f8b69 : pop bx; pop rbp; ret > 0x0002890a : pop r12; pop r13; pop r14; ret > 0x0002678f : pop r12; pop r13; pop r14; pop r15; ret > 0x0002734e : pop r12; pop r13; pop r14; pop r15; pop rbp; ret sp lifting > 0x0003bcf7 : add rsp, 0x118; ret > 0x0003bcf7 : add rsp, 0x118; ret > 0x0003ef01 : add rsp, 0x28; ret > 0x00050f6d : add rsp, 0x38; ret > 0x001012b7 : add rsp, 0x40; ret stack pivoting > 0x0004ae86 : xchg eax, esp; ret > 0x0007f544 : mov esp, eax; mov rax, r12; pop r12; ret > 0x0003ba38 : mov rsp, r8; mov rbp, r9; jmp rdx > 0x000c9aeb : lea rsp, [rbp - 0x10]; pop r12; pop r13; pop rbp; ret > 0x000aae0f : lea esp, [rbx + 0x145fff7]; dec [rax - 0x7d]; ret syscall > 0x000580da : syscall ; ret write mem > 0x0012b1cc : adc [rax], ebx; ret > 0x0012a8cc : adc [rax], ecx; ret > 0x0012a8dc : adc [rax], edx; ret > 0x000a7948 : adc [rbx], eax; ret > 0x00127eb4 : adc [rdx], ecx; ret