ropshell> use 884eae3741bf171a02efd0c3e152cbca (download)
name         : babyrop_level13.1 (x86_64/ELF)
base address : 0x1120
total gadgets: 38

ropshell> suggest
call
    > 0x00001f4a : call [rdi + rbx*8]
    > 0x00001f49 : call [r15 + rbx*8]
jmp
    > 0x0000116f : jmp rax
load reg
    > 0x00001f63 : pop rdi; ret
    > 0x000011f3 : pop rbp; ret
    > 0x00001f62 : pop r15; ret
    > 0x00001f61 : pop rsi; pop r15; ret
    > 0x00001f60 : pop r14; pop r15; ret
pop pop ret
    > 0x00001f62 : pop r15; ret
    > 0x00001f60 : pop r14; pop r15; ret
    > 0x00001f5e : pop r13; pop r14; pop r15; ret
    > 0x00001f5c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00001f5b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00001ef8 : leave ; ret