ropshell> use ec3238f5c897f5069661154f058e0cd1 (download) name : babyrop_level13.0 (x86_64/ELF) base address : 0x1200 total gadgets: 49
ropshell> suggest call > 0x00001afa : call [rdi + rbx*8] > 0x00001af9 : call [r15 + rbx*8] > 0x000014df : call [rax - 0x179a72b8]; pop rbx; pop r12; pop r13; pop rbp; ret jmp > 0x0000124f : jmp rax load reg > 0x00001b13 : pop rdi; ret > 0x000012d3 : pop rbp; ret > 0x00001b12 : pop r15; ret > 0x00001b11 : pop rsi; pop r15; ret > 0x000014e8 : pop r13; pop rbp; ret pop pop ret > 0x00001b12 : pop r15; ret > 0x000014e8 : pop r13; pop rbp; ret > 0x000014e6 : pop r12; pop r13; pop rbp; ret > 0x00001b0c : pop r12; pop r13; pop r14; pop r15; ret > 0x00001b0b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret stack pivoting > 0x000014e1 : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret > 0x000014e2 : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret > 0x00001716 : leave ; ret