ropshell> use ff92827927c1a525d5b1c5af202d79c7 (download)
name         : babyrop_level14.0 (x86_64/ELF)
base address : 0x1320
total gadgets: 48

ropshell> suggest
call
    > 0x00002b4a : call [rdi + rbx*8]
    > 0x00002b49 : call [r15 + rbx*8]
    > 0x000015ff : call [rax - 0x179a72b8]; pop rbx; pop r12; pop r13; pop rbp; ret
jmp
    > 0x0000136f : jmp rax
    > 0x000029ff : jmp [rsi - 0x39]
load reg
    > 0x00002b63 : pop rdi; ret
    > 0x000013f3 : pop rbp; ret
    > 0x00002b62 : pop r15; ret
    > 0x00002b61 : pop rsi; pop r15; ret
    > 0x00001608 : pop r13; pop rbp; ret
pop pop ret
    > 0x00002b62 : pop r15; ret
    > 0x00001608 : pop r13; pop rbp; ret
    > 0x00001606 : pop r12; pop r13; pop rbp; ret
    > 0x00002b5c : pop r12; pop r13; pop r14; pop r15; ret
    > 0x00002b5b : pop rbp; pop r12; pop r13; pop r14; pop r15; ret
stack pivoting
    > 0x00001601 : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x00001602 : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
    > 0x00001836 : leave ; ret