ropshell> use 880802b20aba2d0f3d7ea3bbd400a587 (download)
name         : chal1 (x86_64/ELF)
base address : 0x4011a0
total gadgets: 7092

ropshell> suggest "stack pivoting"
> 0x00404f21 : xchg eax, esp; ret
> 0x004907e4 : mov rsp, rcx; pop rcx; jmp rcx
> 0x004907e5 : mov esp, ecx; pop rcx; jmp rcx
> 0x00484e6b : mov rsp, r8; mov rbp, r9; nop ; jmp rdx
> 0x00484e6c : mov esp, eax; mov rbp, r9; nop ; jmp rdx
> 0x0046fcf7 : xchg esp, edx; sub [rax], al; add [rax - 0x7d], cl; ret
> 0x00411340 : movsxd rsp, esp; mov rdx, r12; call [r13 + 0x38]
> 0x004132e1 : lea esp, [rax]; idiv edi; dec [rax - 0x7d]; clc ; dec [rax - 0x77]; ret
> 0x00477eee : lea esp, [rbp + 2]; pop rbx; mov rax, r12; pop rbp; pop r12; pop r13; ret
> 0x00465195 : lea esp, [rcx + rax]; mov r13, rax; mov rdi, r12; call rbx
> 0x00410171 : lea esp, [rbx + rax*8 + 8]; nop [rax]; call [rbx]
> 0x00486ad8 : leave ; ret