ropshell> use 783fc5beca34cc299570278e93c05eef (download)
name         : libc.tmp (x86_64/RAW)
base address : 0x0
total gadgets: 1540

ropshell> suggest
call
    > 0x000026ea : call rax
    > 0x0000e70f : call rbx
    > 0x00007c65 : call rdx
    > 0x0000ca3e : call rsi
    > 0x00015acb : call rbp
jmp
    > 0x0000765d : push rsp; ret
    > 0x00002cd9 : jmp rax
    > 0x0001478e : jmp rbx
    > 0x00018e89 : jmp rcx
    > 0x00015a10 : jmp rdx
load mem
    > 0x0000f637 : mov eax, [rdx]; ret
    > 0x000096b6 : movsx eax, [rsi]; neg eax; ret
    > 0x0001649f : mov rax, [rdi + 8]; ret
    > 0x000164a0 : mov eax, [rdi + 8]; ret
    > 0x000162f0 : mov edi, [rax + 0x3948fffe]; ret
load reg
    > 0x0000287b : pop rax; ret
    > 0x00001cb6 : pop rbx; ret
    > 0x00002132 : pop rsi; ret
    > 0x000061ab : pop rdi; ret
    > 0x000029bc : pop rbp; ret
pop pop ret
    > 0x0000cec9 : pop r12; ret
    > 0x00005ed8 : pop r12; pop r13; ret
    > 0x0000212d : pop r12; pop r13; pop r14; ret
    > 0x000061a4 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x000061a3 : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
sp lifting
    > 0x00005f31 : add rsp, 0x18; ret
    > 0x00005f31 : add rsp, 0x18; ret
    > 0x00003529 : add rsp, 0x28; ret
    > 0x00014bd5 : add rsp, 0x30; ret
    > 0x0000816e : add rsp, 0x48; ret
stack pivoting
    > 0x000117ad : xchg eax, esp; ret
    > 0x00001c10 : mov rsp, r13; jmp r12
    > 0x00001c11 : mov esp, ebp; jmp r12
    > 0x000172e1 : mov rsp, r8; mov rbp, r9; jmp rdx
    > 0x000172e2 : mov esp, eax; mov rbp, r9; jmp rdx
syscall
    > 0x00017244 : syscall ; ret
write mem
    > 0x000094d2 : add [rax], rdx; mov rbx, [rsp + 0x28]; mov rbp, [rsp + 0x30]; mov r12, [rsp + 0x38]; mov r13, [rsp + 0x40]; add rsp, 0x48; ret
    > 0x000094d3 : add [rax], edx; mov rbx, [rsp + 0x28]; mov rbp, [rsp + 0x30]; mov r12, [rsp + 0x38]; mov r13, [rsp + 0x40]; add rsp, 0x48; ret