ropshell> use e9c73db4de762910c572a97827776de6 (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x243c0
total gadgets: 19536

ropshell> suggest "stack pivoting"
> 0x0005aaff : mov rsp, rdx; ret
> 0x00041347 : xchg eax, esp; ret
> 0x0005ab00 : mov esp, edx; ret
> 0x00077325 : lea rsp, [r10 - 8]; ret
> 0x00077326 : lea esp, [rdx - 8]; ret
> 0x00119b1c : lea rsp, [rbp - 0x10]; pop rbx; pop r14; pop rbp; ret
> 0x00119b1d : lea esp, [rbp - 0x10]; pop rbx; pop r14; pop rbp; ret
> 0x0003e649 : mov rsp, r8; mov rbp, r9; nop ; jmp rdx
> 0x00111083 : push rbx; or [rbx + 0x41], bl; pop rsp; pop rbp; ret
> 0x00129a0b : xchg esp, edi; call [rbp + 0x48]
> 0x0003e64a : mov esp, eax; mov rbp, r9; nop ; jmp rdx
> 0x0013343e : lea esp, [rax]; idiv edi; call [rbx + 0x4c]
> 0x00111d8b : mov esp, ecx; mov [rbp - 0x10], r14; mov r14, rdx; call rsi
> 0x0009ea63 : xchg esp, eax; add [rax], al; add [rbx + 0x31], bl; rol [rcx + 0x5c], 0x5d; ret
> 0x0015b8f1 : push rdi; pop rsp; lea rsi, [rdi + 0x48]; mov rdi, rax; mov rcx, [rcx + 0x18]; jmp rcx
> 0x00026e2f : leave ; ret