ropshell> use 76cd3cc05bfdd87982ce2dea5f26a6cf (download)
name         : ld-linux-x86-64.so.2 (x86_64/ELF)
base address : 0xac0
total gadgets: 1197

ropshell> suggest "load reg"
> 0x00000c09 : pop rbx; ret
> 0x00004363 : pop rcx; ret 0
> 0x000106ca : pop rsi; ret
> 0x00002112 : pop rdi; ret
> 0x000013a7 : pop rbp; ret
> 0x00000e5b : pop rsp; ret
> 0x00000e5a : pop r12; ret
> 0x000013a6 : pop r13; ret
> 0x000106c9 : pop r14; ret
> 0x00002111 : pop r15; ret
> 0x00000d5f : pop rdx; pop rbx; ret
> 0x00000d5e : pop rax; pop rdx; pop rbx; ret
> 0x000190b3 : mov rdi, [rsp - 8]; ret
> 0x000190b4 : mov edi, [rsp - 8]; ret
> 0x0001055c : mov r9, [rsp + 0x30]; call r9
> 0x0001055d : mov ecx, [rsp + 0x30]; call r9
> 0x000190a5 : mov rsi, [rsp - 0x10]; sub rax, fs:[0]; mov rdi, [rsp - 8]; ret
> 0x000190a6 : mov esi, [rsp - 0x10]; sub rax, fs:[0]; mov rdi, [rsp - 8]; ret
> 0x000191e6 : mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x0001b85d : mov rdx, [rsp + 0x38]; mov [r8 + 0x90], rdx; add rsp, 0xd0; ret
> 0x0001b85e : mov edx, [rsp + 0x38]; mov [r8 + 0x90], rdx; add rsp, 0xd0; ret
> 0x0000ff92 : mov r8, [rsp + 0x18]; mov rdi, [rsp + 0x30]; call rax
> 0x0000ff93 : mov eax, [rsp + 0x18]; mov rdi, [rsp + 0x30]; call rax
> 0x000191dc : mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x000191dd : mov ebx, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x000191d7 : mov r10, [rsp + 0x28]; mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x0000a777 : mov rax, [rsp + 0x20]; mov rdi, [rsp + 0x18]; lea r14, [rax + rax*8]; lea rax, [rip + 0x21b8b4]; shl r14, 4; add r14, rax; call [r14 + 0x60]