ropshell> use c9c6f319a16d0759f2dca7cc274df348 (download)
name         : babyrop_level13.0 (x86_64/ELF)
base address : 0x1200
total gadgets: 47

ropshell> suggest
call
    > 0x00001f1a : call [rdi + rbx*8]
    > 0x00001f19 : call [r15 + rbx*8]
    > 0x000014df : call [rax - 0x179a72b8]; pop rbx; pop r12; pop r13; pop rbp; ret
jmp
    > 0x0000124f : jmp rax
load reg
    > 0x00001f33 : pop rdi; ret
    > 0x000012d3 : pop rbp; ret
    > 0x00001f32 : pop r15; ret
    > 0x00001f31 : pop rsi; pop r15; ret
    > 0x000014e8 : pop r13; pop rbp; ret
pop pop ret
    > 0x00001f32 : pop r15; ret
    > 0x000014e8 : pop r13; pop rbp; ret
    > 0x000014e6 : pop r12; pop r13; pop rbp; ret
    > 0x00001f2c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00001f2b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x000014e1 : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x000014e2 : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x00001716 : leave ; ret