ropshell> use 3e5c9b44fc491e6dd5e480fcb316bf2d (download) name : libc.so.6 (x86_64/ELF) base address : 0x1f940 total gadgets: 16079
ropshell> suggest "load reg" > 0x00035fc8 : pop rax; ret > 0x00031a38 : pop rbx; ret > 0x0010bdd3 : pop rcx; ret 0 > 0x00058552 : pop rdx; ret > 0x0001fc1a : pop rsi; ret > 0x0001fc6a : pop rdi; ret > 0x0001f9c3 : pop rbp; ret > 0x0002043a : pop rsp; ret > 0x000f54d4 : pop r10; ret > 0x00020439 : pop r12; ret > 0x0001fb1a : pop r13; ret > 0x0001fc19 : pop r14; ret > 0x0001fc69 : pop r15; ret > 0x00112d16 : pop r8; mov eax, 1; ret > 0x000eb982 : mov rax, [rsp]; add rsp, 0x38; ret > 0x0007b598 : mov rsi, [rsp]; jmp rax > 0x000eb983 : mov eax, [rsp]; add rsp, 0x38; ret > 0x0007b599 : mov esi, [rsp]; jmp rax > 0x0010be32 : mov rcx, [rsp]; call rcx > 0x0010be33 : mov ecx, [rsp]; call rcx > 0x00034b24 : mov edi, [rsp]; call r13 > 0x000285d8 : mov rdi, [rsp + 0x10]; call rbp > 0x000d4208 : mov edx, [rsp]; mov rsi, rbx; call r14 > 0x000f0f7f : mov rdx, [rsp + 0x10]; mov edi, 0x2000004; call rax > 0x0010bba6 : mov rbx, [rsp + 8]; mov rax, [rsp + 0xd8]; mov rdi, rbx; call [rax + 0x20] > 0x0006dc9d : mov r8, [rsp + 0x18]; lea rsi, [rdi + 0x58]; mov rdi, rax; call [rax + 8] > 0x0009b887 : mov r9, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdx, r13; mov rdi, rbp; call rbx > 0x0010bba7 : mov ebx, [rsp + 8]; mov rax, [rsp + 0xd8]; mov rdi, rbx; call [rax + 0x20]