ropshell> use 59a9401857d7bcea2d9a3914678d52e5 (download)
name         : speedrun.bin (x86_64/ELF)
base address : 0x401060
total gadgets: 37

ropshell> suggest
call
    > 0x004011f2 : call [rdi + rbx*8]
    > 0x004011f1 : call [r15 + rbx*8]
jmp
    > 0x004010bc : jmp rax
load reg
    > 0x0040120b : pop rdi; ret
    > 0x00401129 : pop rbp; ret
    > 0x0040120a : pop r15; ret
    > 0x00401209 : pop rsi; pop r15; ret
    > 0x00401208 : pop r14; pop r15; ret
pop pop ret
    > 0x0040120a : pop r15; ret
    > 0x00401208 : pop r14; pop r15; ret
    > 0x00401206 : pop r13; pop r14; pop r15; ret
    > 0x00401204 : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00401203 : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x004011a8 : leave ; ret