ropshell> use df51192fce29e4c7f9a31ccd686837bb (download)
name         : vuln100 (x86_64/ELF)
base address : 0x400a90
total gadgets: 74

ropshell> suggest "load reg"
> 0x00400b42 : pop rbp; ret
> 0x00400b41 : pop rbx; pop rbp; ret
> 0x004013ef : mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013f0 : mov edi, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013ea : mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013eb : mov esi, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013e5 : mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013e6 : mov ebp, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013e0 : mov r12, [rsp + 0x18]; mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013e1 : mov esp, [rsp + 0x18]; mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x004013db : mov rbp, [rsp + 0x10]; mov r12, [rsp + 0x18]; mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret