pause()is reached, I hook on with radare2 and set a breakpoint at the
4(our connection fd) and
1(we need to call it twice to redirect both
stdout). Knowing what you do about calling conventions, have a go at doing this and then caling
win(). The answer is below.
ROPgadgetto find these.