ropshell> use 916ecc1f7cdf9a6f886f7e3f753a1ca9 (download)
name         : v (x86_64/ELF)
base address : 0x1f70
total gadgets: 2201

ropshell> suggest
call
    > 0x00002098 : call rax
    > 0x00085d10 : call rsp
    > 0x0000c89d : call [rax]
    > 0x00011d81 : call [rbx]
    > 0x000183f8 : call [rcx]
jmp
    > 0x00001fc8 : jmp rax
    > 0x0004ac7f : jmp rcx
    > 0x0007ffd0 : push rsp; clc ; dec [rax - 0x77]; ret
    > 0x0006adf2 : jmp [rax]
    > 0x00073b6c : jmp [rbx]
load mem
    > 0x00002e49 : mov rax, [rbp + 0x10]; add rsp, 8; pop rbx; pop rbp; ret
    > 0x00002e4a : mov eax, [rbp + 0x10]; add rsp, 8; pop rbx; pop rbp; ret
    > 0x00065a86 : mov rdx, [rax + 0x18]; mov rax, [rax + 0x10]; pop rbp; ret
    > 0x00065a87 : mov edx, [rax + 0x18]; mov rax, [rax + 0x10]; pop rbp; ret
    > 0x000376c5 : mov rdx, [rbp + 0xd0]; mov [rcx + 0x98], rax; mov [rcx + 0xa0], rdx; nop ; pop rbp; ret
load reg
    > 0x00094373 : pop rdi; ret
    > 0x00001fd0 : pop rbp; ret
    > 0x00094372 : pop r15; ret
    > 0x00002b5e : pop rbx; pop rbp; ret
    > 0x00094371 : pop rsi; pop r15; ret
pop pop ret
    > 0x00094372 : pop r15; ret
    > 0x0000283f : pop r12; pop rbp; ret
    > 0x000045e7 : pop r12; pop r13; pop rbp; ret
    > 0x0009436c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00004793 : pop r12; pop r13; pop r14; pop r15; pop rbp; ret
stack pivoting
    > 0x0005f9c4 : xchg eax, esp; ret
    > 0x0001b272 : lea rsp, [rbp - 0x10]; pop r12; pop r13; pop rbp; ret
    > 0x0001b273 : lea esp, [rbp - 0x10]; pop r12; pop r13; pop rbp; ret
    > 0x000368f6 : lea esp, [rdx + rdi*8 - 1]; jmp [rsi + 0xf]
    > 0x000028ae : leave ; ret
write mem
    > 0x0000d0a1 : add [rcx], edi; ret
    > 0x00003c4b : add [rax + 0x18c48348], edx; pop rbx; pop rbp; ret
    > 0x0000a895 : add [rbx + 0x7900ec7d], eax; fnstsw [rax - 1]; pop rbx; pop rbp; ret
    > 0x0006b45c : add [rax], ebx; std ; call [rax + 0x58c48348]; pop rbx; pop rbp; ret
    > 0x00004855 : add [rdx], ecx; add [rsi + 0xf], ah; push rdi; shr ebx, 5; movsd xmm0, [rbp - 8]; pop rbp; ret