ropshell> use 5958405d3922776ee9060c4b6fa23830 (download)
name         : ret2csu-zhengming-level5 (x86_64/ELF)
base address : 0x400460
total gadgets: 49

ropshell> suggest "load reg"
> 0x00400512 : pop rbp; ret
> 0x00400511 : pop rbx; pop rbp; ret
> 0x0040061f : mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x00400620 : mov edi, [rsp + 0x30]; add rsp, 0x38; ret
> 0x0040061a : mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x0040061b : mov esi, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x00400615 : mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x00400616 : mov ebp, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x00400610 : mov r12, [rsp + 0x18]; mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x00400611 : mov esp, [rsp + 0x18]; mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x0040060b : mov rbp, [rsp + 0x10]; mov r12, [rsp + 0x18]; mov r13, [rsp + 0x20]; mov r14, [rsp + 0x28]; mov r15, [rsp + 0x30]; add rsp, 0x38; ret