ropshell> use 783fc5beca34cc299570278e93c05eef (download)
name         : libc.tmp (x86_64/RAW)
base address : 0x0
total gadgets: 1540

ropshell> suggest "load reg"
> 0x0000287b : pop rax; ret
> 0x00001cb6 : pop rbx; ret
> 0x00002132 : pop rsi; ret
> 0x000061ab : pop rdi; ret
> 0x000029bc : pop rbp; ret
> 0x0000ceca : pop rsp; ret
> 0x0000cec9 : pop r12; ret
> 0x00005eda : pop r13; ret
> 0x00002131 : pop r14; ret
> 0x000061aa : pop r15; ret
> 0x00016a92 : mov rdi, [rsp - 8]; ret
> 0x00018cab : mov r13, [rsp - 8]; ret
> 0x00010b13 : mov r14, [rsp - 8]; ret
> 0x0001702a : mov eax, [rsp - 0x44]; ret
> 0x00010b14 : mov esi, [rsp - 8]; ret
> 0x00016a93 : mov edi, [rsp - 8]; ret
> 0x00018cac : mov ebp, [rsp - 8]; ret
> 0x00014bd1 : mov rbx, [rsp]; add rsp, 0x30; ret
> 0x00014bd2 : mov ebx, [rsp]; add rsp, 0x30; ret
> 0x00005f2c : mov rbp, [rsp + 0x10]; add rsp, 0x18; ret
> 0x00012647 : mov r12, [rsp + 0x10]; add rsp, 0x18; ret
> 0x0000e994 : mov r15, [rsp + 0x30]; add rsp, 0x38; ret
> 0x00012648 : mov esp, [rsp + 0x10]; add rsp, 0x18; ret
> 0x00014785 : mov rax, [rsp]; add rsp, 0x48; jmp r11
> 0x000174e0 : mov rdx, [rsp - 0x68]; mov [r8 + 0x90], rdx; add rsp, 0xd0; ret
> 0x00016a84 : mov rsi, [rsp - 0x10]; sub rax, fs:[0]; mov rdi, [rsp - 8]; ret
> 0x000174e1 : mov edx, [rsp - 0x68]; mov [r8 + 0x90], rdx; add rsp, 0xd0; ret
> 0x00016b53 : mov rcx, [rsp + 0x40]; add rsp, 0x50; jmp [rax]
> 0x00016b54 : mov ecx, [rsp + 0x40]; add rsp, 0x50; jmp [rax]
> 0x0000e3b1 : mov r8, [rsp + 0x40]; mov rdi, [rsp + 0x48]; call rax
> 0x00016b49 : mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x50; jmp [rax]
> 0x00016b44 : mov r10, [rsp + 0x28]; mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x50; jmp [rax]
> 0x00016b3f : mov r9, [rsp + 0x20]; mov r10, [rsp + 0x28]; mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x50; jmp [rax]