ropshell> use 88f84092ae8dd75c534ffcd0dff8cb99 (download)
name         : pwn4 (x86_64/ELF)
base address : 0x400470
total gadgets: 49

ropshell> suggest
call
    > 0x0040055e : call rax
    > 0x00400565 : call [rbp + 0x48]
    > 0x004005e9 : call [r12 + rbx*8]
jmp
    > 0x004004c5 : jmp rax
load reg
    > 0x00400603 : pop rdi; ret
    > 0x004004d0 : pop rbp; ret
    > 0x00400602 : pop r15; ret
    > 0x00400601 : pop rsi; pop r15; ret
    > 0x00400600 : pop r14; pop r15; ret
pop pop ret
    > 0x00400602 : pop r15; ret
    > 0x00400600 : pop r14; pop r15; ret
    > 0x004005fe : pop r13; pop r14; pop r15; ret
    > 0x004005fc : pop r12; pop r13; pop r14; pop r15; ret
    > 0x004005fb : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00400598 : leave ; ret