ropshell> use 5c7d710d3e835bd2d3935f1d5bb0dd68 (download)
name         : chall (x86_64/ELF)
base address : 0x400800
total gadgets: 53

ropshell> suggest
call
    > 0x00400d7a : call [rsp + rbx*8]
    > 0x00400d79 : call [r12 + rbx*8]
jmp
    > 0x00400861 : jmp rax
load reg
    > 0x00400d93 : pop rdi; ret
    > 0x00400868 : pop rbp; ret
    > 0x00400d92 : pop r15; ret
    > 0x00400d91 : pop rsi; pop r15; ret
    > 0x00400d90 : pop r14; pop r15; ret
pop pop ret
    > 0x00400d92 : pop r15; ret
    > 0x00400d90 : pop r14; pop r15; ret
    > 0x00400d8e : pop r13; pop r14; pop r15; ret
    > 0x00400d8c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00400d8b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00400a36 : leave ; ret