ropshell> use d68251da59b976b828636eec150152c5 (download)
name         : chall (x86_64/ELF)
base address : 0x4010f0
total gadgets: 39
ropshell> suggest
call
    > 0x0040132a : call [rdi + rbx*8]
    > 0x00401329 : call [r15 + rbx*8]
jmp
    > 0x0040114c : jmp rax
load reg
    > 0x00401343 : pop rdi; ret
    > 0x004011bd : pop rbp; ret
    > 0x00401342 : pop r15; ret
    > 0x00401341 : pop rsi; pop r15; ret
    > 0x00401340 : pop r14; pop r15; ret
pop pop ret
    > 0x00401342 : pop r15; ret
    > 0x00401340 : pop r14; pop r15; ret
    > 0x0040133e : pop r13; pop r14; pop r15; ret
    > 0x0040133c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0040133b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x004012d5 : leave ; ret