ropshell> use d68f6ad97de175044956398ba407526e (download)
name         : chal (x86_64/ELF)
base address : 0x4006a0
total gadgets: 40

ropshell> suggest
call
    > 0x004009ca : call [rsp + rbx*8]
    > 0x004009c9 : call [r12 + rbx*8]
jmp
    > 0x00400701 : jmp rax
load reg
    > 0x004009e3 : pop rdi; ret
    > 0x00400708 : pop rbp; ret
    > 0x004009e2 : pop r15; ret
    > 0x004009e1 : pop rsi; pop r15; ret
    > 0x004009e0 : pop r14; pop r15; ret
pop pop ret
    > 0x004009e2 : pop r15; ret
    > 0x004009e0 : pop r14; pop r15; ret
    > 0x004009de : pop r13; pop r14; pop r15; ret
    > 0x004009dc : pop r12; pop r13; pop r14; pop r15; ret
    > 0x004009db : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00400915 : leave ; ret