ropshell> use 2ee5c7b33bd187926818844fb4a6fe04 (download)
name         : no-win (x86_64/RAW)
base address : 0x0
total gadgets: 7328

ropshell> suggest
call
    > 0x00001014 : call rax
    > 0x0001fa6b : call rbx
    > 0x0000f621 : call rcx
    > 0x000357cc : call rdx
    > 0x00061a79 : call rsi
jmp
    > 0x0001ff6b : push rsp; ret
    > 0x0000183c : jmp rax
    > 0x00066c1d : jmp rbx
    > 0x0001b554 : jmp rcx
    > 0x0000570d : jmp rdx
load mem
    > 0x00025cc2 : mov eax, [rcx]; ret
    > 0x00098d06 : mov edi, [rdx]; ret
    > 0x00010334 : mov rax, [rdi + 0x68]; ret
    > 0x00010335 : mov eax, [rdi + 0x68]; ret
    > 0x00046ef9 : mov eax, [rdx]; pop r12; pop rbp; ret
load reg
    > 0x00027eeb : pop rax; ret
    > 0x00044b81 : pop rbx; ret
    > 0x00013210 : pop rdx; ret
    > 0x00001799 : pop rbp; ret
    > 0x00037468 : pop rsp; ret
pop pop ret
    > 0x00027eeb : pop rax; ret
    > 0x00001797 : pop r12; pop rbp; ret
    > 0x000025db : pop r12; pop r13; pop rbp; ret
    > 0x0000a3bd : pop r12; pop r13; pop r14; pop rbp; ret
    > 0x00002121 : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
sp lifting
    > 0x00066c18 : add rsp, 0x18; jmp r11
    > 0x00066c18 : add rsp, 0x18; jmp r11
stack pivoting
    > 0x0002741a : xchg eax, esp; ret
    > 0x00006ade : lea esp, [rax - 0x7600000a]; ret
    > 0x0007ae99 : mov rsp, rcx; pop rcx; jmp rcx
    > 0x0007ae9a : mov esp, ecx; pop rcx; jmp rcx
    > 0x000480d5 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
syscall
    > 0x00010f46 : syscall ; ret
write mem
    > 0x00046468 : adc [rax], ecx; ret
    > 0x0001b04c : adc [rcx], eax; ret
    > 0x0001ce92 : adc [rdi], eax; ret
    > 0x0000e90b : add [rax + 0x39], ecx; ret
    > 0x0001b5ef : adc [rax + 0x30], edi; ret