ropshell> use 42548865c629c32c6d1e14e17dafcf88 (download)
name         : babyrop_level5.0 (x86_64/ELF)
base address : 0x4011b0
total gadgets: 60

ropshell> suggest
call
    > 0x0040294a : call [rdi + rbx*8]
    > 0x00402949 : call [r15 + rbx*8]
    > 0x0040148c : call [rax - 0x179a72b8]; pop rbx; pop r12; pop r13; pop rbp; ret
jmp
    > 0x0040120c : jmp rax
load reg
    > 0x004026e8 : pop rax; ret
    > 0x00402708 : pop rcx; ret
    > 0x004026f0 : pop rdx; ret
    > 0x004026ff : pop rsi; ret
    > 0x004026df : pop rdi; ret
pop pop ret
    > 0x004026ef : pop r10; ret
    > 0x00401495 : pop r13; pop rbp; ret
    > 0x00401493 : pop r12; pop r13; pop rbp; ret
    > 0x0040295c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x0040295b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x0040148e : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x0040148f : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x0040168b : leave ; ret
syscall
    > 0x0040270f : syscall ; ret