ropshell> use cf87bb8fe5306c1c6409e34437ceb289 (download)
name         : stack_overflow_x64.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 1181

ropshell> suggest
call
    > 0x140001bbe : call rax
    > 0x1400147e4 : call rbx
    > 0x14000da42 : call rdx
    > 0x140001cf2 : call r8
    > 0x14000fd66 : call [rax]
jmp
    > 0x14000bb94 : push rsp; ret
    > 0x140011dc4 : jmp rax
    > 0x140001ecc : jmp rcx
    > 0x140002021 : jmp rdx
    > 0x1400148f5 : jmp rsi
load mem
    > 0x1400066d6 : movzx ecx, [rdx]; sub eax, ecx; ret
    > 0x140002498 : mov rcx, [rdx]; mov [rax], rcx; ret
    > 0x140006bea : mov eax, [rcx + 0x18]; add rsp, 0x28; ret
    > 0x14000fb3d : mov rsi, [r11 + 0x18]; mov rsp, r11; pop rdi; ret
    > 0x14000a73e : mov rdi, [r11 + 0x20]; mov rsp, r11; pop r14; ret
load reg
    > 0x140011d65 : pop rax; ret
    > 0x140001061 : pop rbx; ret
    > 0x140002f79 : pop rsi; ret
    > 0x1400010a4 : pop rdi; ret
    > 0x1400016b6 : pop rbp; ret
pop pop ret
    > 0x1400048e2 : pop r12; ret
    > 0x14000d189 : pop r12; pop rbp; ret
    > 0x14000d8b5 : pop r12; pop rdi; pop rsi; ret
    > 0x140002b7b : pop r12; pop rdi; pop rsi; pop rbp; ret
    > 0x140007022 : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x140001563 : add rsp, 0x18; ret
    > 0x140001563 : add rsp, 0x18; ret
    > 0x14000120b : add rsp, 0x28; ret
    > 0x140004c1c : add rsp, 0x38; ret
    > 0x140013d12 : add rsp, 0x48; ret
stack pivoting
    > 0x14000183b : xchg eax, esp; ret
    > 0x140007823 : mov rsp, r11; pop r14; ret
    > 0x140007824 : mov esp, ebx; pop r14; ret
    > 0x14000a770 : push rsp; pop rsp; add [rax], eax; sete al; ret
    > 0x14000fa7d : lea rsp, [rbp + 0x10]; pop r15; pop r14; pop r13; pop r12; pop rbp; ret
write mem
    > 0x1400027df : adc [rcx], eax; mov rax, r11; ret
    > 0x14000c141 : add [rcx + 0xf], eax; xchg eax, esi; ret
    > 0x14000697b : adc [rdi + 6], esi; mov eax, 0xd; ret
    > 0x1400027dc : adc [rbx], ecx; movups xmm[rcx], xmm0; mov rax, r11; ret
    > 0x14000245b : add [rdx + 0xf], eax; adc [rcx + rax - 0x10], ecx; mov rax, rcx; ret