ropshell> use f41878dcecc2ceb9d2bf4a76fde23c38 (download)
name         : 2048-hacker-solvable-distr.out (x86_64/ELF)
base address : 0x4011b0
total gadgets: 247

ropshell> suggest
call
    > 0x00402d11 : call [rax + 0x4855c3c9]; mov ebp, esp; mov [rbp - 8], rdi; mov [rbp - 0x10], rsi; nop ; pop rbp; ret
jmp
    > 0x0040120c : jmp rax
load mem
    > 0x004026e8 : mov rcx, [rax]; mov rax, rdx; sub rax, rcx; sar rax, 3; pop rbp; ret
    > 0x004026e9 : mov ecx, [rax]; mov rax, rdx; sub rax, rcx; sar rax, 3; pop rbp; ret
    > 0x00402708 : mov rdx, [rax]; mov rax, [rbp - 0x10]; shl rax, 3; add rax, rdx; pop rbp; ret
    > 0x00402709 : mov edx, [rax]; mov rax, [rbp - 0x10]; shl rax, 3; add rax, rdx; pop rbp; ret
load reg
    > 0x0040127d : pop rbp; ret
    > 0x00401760 : pop rsi; pop rbp; ret
    > 0x004031be : pop rsp; pop rbp; ret
    > 0x004031bd : pop r12; pop rbp; ret
    > 0x0040175f : pop r14; pop rbp; ret
pop pop ret
    > 0x0040127d : pop rbp; ret
    > 0x004031bd : pop r12; pop rbp; ret
    > 0x0040175d : pop r13; pop r14; pop rbp; ret
    > 0x0040175b : pop r12; pop r13; pop r14; pop rbp; ret
    > 0x0040175a : pop rbx; pop r12; pop r13; pop r14; pop rbp; ret
stack pivoting
    > 0x004015cb : leave ; ret
write mem
    > 0x004030e6 : add [rax], r8; add [rax - 0x75], cl; add cl, cl; ret