ropshell> use 2fb4ad304842f92185dbecd7203a7ff2 (download)
name         : sword (x86_64/ELF)
base address : 0x400860
total gadgets: 68

ropshell> suggest
call
    > 0x0040094e : call rax
    > 0x00401057 : call [rax + 0x38c48348]; pop rbx; pop rbp; ret
    > 0x00400955 : call [rbp + 0x48]
    > 0x00401299 : call [r12 + rbx*8]
jmp
    > 0x004008b5 : jmp rax
load reg
    > 0x004012b3 : pop rdi; ret
    > 0x004008c0 : pop rbp; ret
    > 0x004012b2 : pop r15; ret
    > 0x00400e2f : pop rbx; pop rbp; ret
    > 0x004012b1 : pop rsi; pop r15; ret
pop pop ret
    > 0x004012b2 : pop r15; ret
    > 0x004012b0 : pop r14; pop r15; ret
    > 0x004012ae : pop r13; pop r14; pop r15; ret
    > 0x004012ac : pop r12; pop r13; pop r14; pop r15; ret
    > 0x004012ab : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00400a11 : leave ; ret
write mem
    > 0x00400ac6 : add [rbx + 0x7e05fc7d], eax; fdivr [rax - 1]; pop rbp; ret