ropshell> use 783fc5beca34cc299570278e93c05eef (download) name : libc.tmp (x86_64/RAW) base address : 0x0 total gadgets: 1540
ropshell> suggest "load mem" > 0x0000f637 : mov eax, [rdx]; ret > 0x000096b6 : movsx eax, [rsi]; neg eax; ret > 0x0001649f : mov rax, [rdi + 8]; ret > 0x000164a0 : mov eax, [rdi + 8]; ret > 0x000162f0 : mov edi, [rax + 0x3948fffe]; ret > 0x0001656a : mov rdi, [r12]; nop ; call rax > 0x00013c37 : mov rax, [r13]; add rax, [rdx + 8]; call rax > 0x00013c38 : mov eax, [rbp]; add rax, [rdx + 8]; call rax > 0x0000c87f : mov rax, [r13 + 0x10]; add rax, [rbx]; call rax > 0x0000c880 : mov eax, [rbp + 0x10]; add rax, [rbx]; call rax > 0x000164af : mov rax, [rsi + 8]; cmp [rdi + 8], rax; sete al; movzx eax, al; ret > 0x00014b1c : mov rsi, [rdi + 0x20]; mov rdi, [rdi + 0x28]; call r11 > 0x000164b0 : mov eax, [rsi + 8]; cmp [rdi + 8], rax; sete al; movzx eax, al; ret > 0x00014b1d : mov esi, [rdi + 0x20]; mov rdi, [rdi + 0x28]; call r11 > 0x000172db : mov r15, [rdi + 0x28]; mov eax, esi; mov rsp, r8; mov rbp, r9; jmp rdx > 0x0000cabf : mov rax, [r14 + 0x10]; add rax, [rbx]; mov [rbp - 0xd0], r10; call rax > 0x00014b18 : mov rcx, [rdi + 0x18]; mov rsi, [rdi + 0x20]; mov rdi, [rdi + 0x28]; call r11 > 0x00014b19 : mov ecx, [rdi + 0x18]; mov rsi, [rdi + 0x20]; mov rdi, [rdi + 0x28]; call r11 > 0x000172d7 : mov r14, [rdi + 0x20]; mov r15, [rdi + 0x28]; mov eax, esi; mov rsp, r8; mov rbp, r9; jmp rdx > 0x0000e957 : mov r14, [rax]; mov r12, rax; mov [rip + 0x213813], rbp; mov rdi, r15; mov [rax], 0; call rbx > 0x0000e958 : mov esi, [rax]; mov r12, rax; mov [rip + 0x213813], rbp; mov rdi, r15; mov [rax], 0; call rbx > 0x0000e3aa : mov esi, [rbp + 0x10]; lea r9, [r8 + rdi]; mov r8, [rsp + 0x40]; mov rdi, [rsp + 0x48]; call rax > 0x000172d3 : mov r13, [rdi + 0x18]; mov r14, [rdi + 0x20]; mov r15, [rdi + 0x28]; mov eax, esi; mov rsp, r8; mov rbp, r9; jmp rdx > 0x000172d4 : mov ebp, [rdi + 0x18]; mov r14, [rdi + 0x20]; mov r15, [rdi + 0x28]; mov eax, esi; mov rsp, r8; mov rbp, r9; jmp rdx > 0x0000e3a3 : mov edi, [rdx]; lea rdx, [r12 + rsi + 8]; mov esi, [rbp + 0x10]; lea r9, [r8 + rdi]; mov r8, [rsp + 0x40]; mov rdi, [rsp + 0x48]; call rax