ropshell> use df51192fce29e4c7f9a31ccd686837bb (download)
name         : vuln100 (x86_64/ELF)
base address : 0x400a90
total gadgets: 74

ropshell> suggest
call
    > 0x00400acc : call rax
    > 0x00400f75 : call [rax]
    > 0x004013ca : call [rsp + rbx*8]
    > 0x004013c9 : call [r12 + rbx*8]
jmp
    > 0x00400b6e : jmp rax
    > 0x00400d73 : jmp [rcx + 0x62]
    > 0x00400dd0 : jmp [rdx + 0x30]
    > 0x00400dee : jmp [rsi + 0x32]
    > 0x00400dc6 : jmp [rbp + 0x36]
load reg
    > 0x00400b42 : pop rbp; ret
    > 0x00400b41 : pop rbx; pop rbp; ret
    > 0x004013ef : mov r15, [rsp + 0x30]; add rsp, 0x38; ret
    > 0x004013f0 : mov edi, [rsp + 0x30]; add rsp, 0x38; ret
    > 0x004013ea : mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
pop pop ret
    > 0x00400b42 : pop rbp; ret
    > 0x00400b41 : pop rbx; pop rbp; ret
sp lifting
    > 0x004013f4 : add rsp, 0x38; ret
    > 0x004013f4 : add rsp, 0x38; ret
stack pivoting
    > 0x00400c67 : leave ; ret