ropshell> use 7b29ee082c1808be4e02e52f0290eb3d (download) name : libc.so.6 (x86_64/ELF) base address : 0x1f4a0 total gadgets: 18413
ropshell> suggest "load reg" > 0x000382e8 : pop rax; ret > 0x00021e78 : pop rbx; ret > 0x0002477f : pop rcx; ret > 0x000b3700 : pop rdx; ret > 0x000240e5 : pop rsi; ret > 0x00022442 : pop rdi; ret > 0x0001f503 : pop rbp; ret > 0x0002161f : pop rsp; ret > 0x000f25d4 : pop r10; ret > 0x0002161e : pop r12; ret > 0x0001fe03 : pop r13; ret > 0x000240e4 : pop r14; ret > 0x00022441 : pop r15; ret > 0x0010f096 : pop r8; mov eax, 1; ret > 0x000dfaaf : mov rax, [rsp - 0x50]; rep ; ret > 0x000dfab0 : mov eax, [rsp - 0x50]; rep ; ret > 0x0007c6d2 : mov rsi, [rsp]; jmp rax > 0x0007c6d3 : mov esi, [rsp]; jmp rax > 0x00036c3d : mov edi, [rsp]; call r13 > 0x0010cc04 : mov rcx, [rsp + 0x18]; call rcx > 0x000b4510 : mov rdx, [rsp + 0x28]; call rax > 0x0002acd5 : mov rdi, [rsp + 0x18]; call r15 > 0x0010cc05 : mov ecx, [rsp + 0x18]; call rcx > 0x000b4511 : mov edx, [rsp + 0x28]; call rax > 0x00021dc5 : mov r8, [rsp + 0x18]; add rsp, 0x28; jmp rax > 0x0009caa8 : mov r9, [rsp + 0x10]; mov rsi, [rsp + 0x18]; call rbx > 0x000368fa : mov rbx, [rsp]; nop ; mov rsi, r14; mov rdi, r13; mov rdx, r12; call rbp > 0x000368fb : mov ebx, [rsp]; nop ; mov rsi, r14; mov rdi, r13; mov rdx, r12; call rbp