ropshell> use 08fafb1d011bfc7e84a4d34b9c1530ef (download)
name         : tictactoe (x86_64/ELF)
base address : 0x4011b0
total gadgets: 96
ropshell> suggest
call
    > 0x004030f2 : call [rdi + rbx*8]
    > 0x004030f1 : call [r15 + rbx*8]
jmp
    > 0x0040120c : jmp rax
    > 0x00401ee5 : jmp [rsi - 0x77]
load mem
    > 0x00401d83 : mov eax, [rdx + rax]; cdqe ; lea rdx, [rip + 0x246d]; add rax, rdx; jmp rax
load reg
    > 0x0040310b : pop rdi; ret
    > 0x00401279 : pop rbp; ret
    > 0x0040310a : pop r15; ret
    > 0x00403109 : pop rsi; pop r15; ret
    > 0x00403108 : pop r14; pop r15; ret
pop pop ret
    > 0x0040310a : pop r15; ret
    > 0x00403108 : pop r14; pop r15; ret
    > 0x00403106 : pop r13; pop r14; pop r15; ret
    > 0x00403104 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00403103 : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00401587 : leave ; ret
write mem
    > 0x00402259 : add [rbx + 0x7e08fc7d], eax; fstp x[rax + 1]; pop rbp; ret