ropshell> use 4195ee2d06a21466ff26b4f623f2873f (download)
name         : ch86 (x86_64/ELF)
base address : 0xbe0
total gadgets: 78

ropshell> suggest
call
    > 0x0000162c : call rax
    > 0x00001209 : call [rax + 0x8c48348]; pop rbx; pop rbp; ret
    > 0x00000e5a : call [rdx]
    > 0x00000ce9 : call [rbp + 0x48]
    > 0x000018aa : call [rsp + rbx*8]
jmp
    > 0x00000c34 : jmp rax
    > 0x00001851 : jmp [rsi + 0x2e]
load mem
    > 0x00001624 : mov rax, [rdx + rax]; mov rax, [rax + 8]; call rax
    > 0x00001625 : mov eax, [rdx + rax]; mov rax, [rax + 8]; call rax
load reg
    > 0x000018c3 : pop rdi; ret
    > 0x00000c40 : pop rbp; ret
    > 0x000018c2 : pop r15; ret
    > 0x0000120f : pop rbx; pop rbp; ret
    > 0x000018c1 : pop rsi; pop r15; ret
pop pop ret
    > 0x000018c2 : pop r15; ret
    > 0x000018c0 : pop r14; pop r15; ret
    > 0x000018be : pop r13; pop r14; pop r15; ret
    > 0x000018bc : pop r12; pop r13; pop r14; pop r15; ret
    > 0x000018bb : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00000dfd : leave ; ret