ropshell> use 75bb692f5cd51ba4143a42fc4948b025 (download)
name         : readme_revenge (x86_64/ELF)
base address : 0x400300
total gadgets: 7758

ropshell> suggest "stack pivoting"
> 0x00489d16 : mov rsp, rcx; ret
> 0x00489d17 : mov esp, ecx; ret
> 0x0046aca4 : xchg esp, edi; inc [rbp - 0x76cc8740]; ret
> 0x00434117 : mov esp, edx; call rbp
> 0x0046fcd8 : mov rsp, r8; mov rbp, r9; jmp rdx
> 0x0046fcd9 : mov esp, eax; mov rbp, r9; jmp rdx
> 0x00407e6b : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x00407e6c : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x0044b316 : xchg eax, esp; shr cl, 6; idiv bh; jmp [rdi - 0x18]
> 0x0046cf92 : lea esp, [rcx + rdx*8]; lea rax, [rcx - 8]; mov [rbp - 0x68], rbx; mov rbx, r12; mov r12, rax; nop [rax + rax]; call [rbx]
> 0x00435626 : leave ; ret