ropshell> use f41481a20682a4282e96ce716f17373b (download)
name         : babyrop_level7.0 (x86_64/ELF)
base address : 0x4011d0
total gadgets: 48

ropshell> suggest
call
    > 0x00401c3a : call [rdi + rbx*8]
    > 0x00401c39 : call [r15 + rbx*8]
    > 0x004014ac : call [rax - 0x179a72b8]; pop rbx; pop r12; pop r13; pop rbp; ret
jmp
    > 0x0040122c : jmp rax
load reg
    > 0x00401c53 : pop rdi; ret
    > 0x0040129d : pop rbp; ret
    > 0x00401c52 : pop r15; ret
    > 0x00401c51 : pop rsi; pop r15; ret
    > 0x004014b5 : pop r13; pop rbp; ret
pop pop ret
    > 0x00401c52 : pop r15; ret
    > 0x004014b5 : pop r13; pop rbp; ret
    > 0x004014b3 : pop r12; pop r13; pop rbp; ret
    > 0x00401c4c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00401c4b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x004014ae : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x004014af : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x004016ab : leave ; ret