ropshell> use 20abc2226c9c6b2b06a894750b8f276c (download)
name         : tourniquet (x86_64/ELF)
base address : 0x400510
total gadgets: 44

ropshell> suggest
call
    > 0x004006ba : call [rsp + rbx*8]
    > 0x004006b9 : call [r12 + rbx*8]
jmp
    > 0x00400571 : jmp rax
load reg
    > 0x004006d3 : pop rdi; ret
    > 0x00400578 : pop rbp; ret
    > 0x004006d2 : pop r15; ret
    > 0x004006d1 : pop rsi; pop r15; ret
    > 0x004006d0 : pop r14; pop r15; ret
pop pop ret
    > 0x004006d2 : pop r15; ret
    > 0x004006d0 : pop r14; pop r15; ret
    > 0x004006ce : pop r13; pop r14; pop r15; ret
    > 0x004006cc : pop r12; pop r13; pop r14; pop r15; ret
    > 0x004006cb : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00400624 : leave ; ret