ropshell> use 8548e4731a83e6ed3fc167633d28c21f (download) name : libc.so.6 (x86_64/ELF) base address : 0x1f4a0 total gadgets: 16450
ropshell> suggest "load reg" > 0x00038288 : pop rax; ret > 0x00021e78 : pop rbx; ret > 0x000b5f30 : pop rdx; ret > 0x00024125 : pop rsi; ret > 0x00022482 : pop rdi; ret > 0x0001f503 : pop rbp; ret > 0x0002161f : pop rsp; ret > 0x000f4bb4 : pop r10; ret > 0x0002161e : pop r12; ret > 0x0001fe03 : pop r13; ret > 0x00024124 : pop r14; ret > 0x00022481 : pop r15; ret > 0x00111606 : pop r8; mov eax, 1; ret > 0x000e13af : mov rax, [rsp]; add rsp, 0x28; ret > 0x0007c682 : mov rsi, [rsp]; jmp rax > 0x000e13b0 : mov eax, [rsp]; add rsp, 0x28; ret > 0x0007c683 : mov esi, [rsp]; jmp rax > 0x00036b9d : mov edi, [rsp]; call r13 > 0x000eeeb6 : pop rcx; add [rdx + rdx*8 + 0x3948ec75], eax; ret > 0x0010f174 : mov rcx, [rsp + 0x18]; call rcx > 0x000b6d40 : mov rdx, [rsp + 0x28]; call rax > 0x0002ad15 : mov rdi, [rsp + 0x18]; call r15 > 0x0010f175 : mov ecx, [rsp + 0x18]; call rcx > 0x000b6d41 : mov edx, [rsp + 0x28]; call rax > 0x00021dc5 : mov r8, [rsp + 0x18]; add rsp, 0x28; jmp rax > 0x0009e3c8 : mov r9, [rsp + 0x10]; mov rsi, [rsp + 0x18]; call rbx > 0x0003685a : mov rbx, [rsp]; nop ; mov rsi, r14; mov rdi, r13; mov rdx, r12; call rbp > 0x0003685b : mov ebx, [rsp]; nop ; mov rsi, r14; mov rdi, r13; mov rdx, r12; call rbp