ropshell> use ed6014c1ccd07eb2ef94913332b01b25 (download)
name         : nginx (x86_64/ELF)
base address : 0x4037c0
total gadgets: 1991

ropshell> suggest
call
    > 0x00405676 : call rax
    > 0x0040b93b : call rbx
    > 0x00413459 : call rdx
    > 0x0040b1db : call rdi
    > 0x004083a8 : call rbp
jmp
    > 0x0040381c : jmp rax
    > 0x004195a2 : jmp rbx
    > 0x00404594 : jmp rcx
    > 0x004438dc : jmp rdx
    > 0x00407ab7 : jmp rsi
load mem
    > 0x00414b10 : mov rsi, [r13 + 0x10]; call rax
    > 0x0041b8c2 : mov rdi, [rbx + 0x10]; call rdx
    > 0x00422cd3 : mov rdi, [rdx + 0x40]; call rax
    > 0x00442c2c : mov rdi, [rbp + 0x48]; call rax
    > 0x00414b11 : mov esi, [rbp + 0x10]; call rax
load reg
    > 0x0040391e : pop rbx; ret
    > 0x00408372 : pop rsi; ret
    > 0x004042ab : pop rdi; ret
    > 0x00403889 : pop rbp; ret
    > 0x0040397b : pop rsp; ret
pop pop ret
    > 0x0040397a : pop r12; ret
    > 0x00403ba6 : pop r12; pop r13; ret
    > 0x0040836d : pop r12; pop r13; pop r14; ret
    > 0x004042a4 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00440f42 : pop rax; pop rbx; pop rbp; pop r12; pop r13; ret
sp lifting
    > 0x00405452 : add rsp, 0x18; ret
    > 0x00405452 : add rsp, 0x18; ret
    > 0x0043c5be : add rsp, 0x28; ret
    > 0x0041ffcc : add rsp, 0x38; ret
stack pivoting
    > 0x00444fd9 : xchg eax, esp; ret 0xb8
    > 0x0043a9d4 : xchg esp, edi; call [rbp + 0x53]
    > 0x0043a7e9 : mov esp, edi; call [rbp + 0x53]
    > 0x0043cf9f : mov esp, esp; mov rdi, r12; call rax
    > 0x00464976 : lea esp, [rsp + 0x40]; mov rdi, r12; call rax
write mem
    > 0x00434c62 : add [rax + 0x39], ecx; ret
    > 0x0041aeea : adc [rsi], eax; add [rax - 0x77], cl; ret
    > 0x00446093 : add [rax + 0xf], esi; xchg eax, ebp; ret
    > 0x00439d29 : add [rbp + 5], esi; add rsp, 0x18; ret
    > 0x00456333 : add [rdi], ecx; xchg [rdx], bl; add al, [rax]; add [rax - 0x7d], cl; ret