ropshell> use e2a9f6f842f1285975b83c8356ed7c41 (download)
name         : rtarget (x86_64/ELF)
base address : 0x400e80
total gadgets: 186

ropshell> suggest
call
    > 0x00400f6d : call rax
    > 0x0040200c : call [rbp + 0x48]
    > 0x0040309a : call [rsp + rbx*8]
    > 0x00403099 : call [r12 + rbx*8]
jmp
    > 0x00400ee7 : jmp rax
    > 0x00400f27 : jmp rdx
    > 0x00402eec : jmp [rsi - 0x39]
load reg
    > 0x00401a00 : pop rax; ret
    > 0x00401de4 : pop rbx; ret
    > 0x0040130d : pop rsi; ret
    > 0x00402d33 : pop rdi; ret
    > 0x00400ed5 : pop rbp; ret
pop pop ret
    > 0x0040192f : pop r12; ret
    > 0x00402207 : pop r12; pop r13; ret
    > 0x00401308 : pop r12; pop r13; pop r14; ret
    > 0x00402d2c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00402d2b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
sp lifting
    > 0x004017f3 : add rsp, 0x28; ret
    > 0x004017f3 : add rsp, 0x28; ret
stack pivoting
    > 0x00401acb : mov rsp, rax; ret
    > 0x00401ac7 : xchg eax, esp; ret
    > 0x00401acc : mov esp, eax; ret
    > 0x00401a48 : leave ; ret