ropshell> use 8c44357fe74e7979907a60edd78a4087 (download) name : libc.so.6 (x86_64/ELF) base address : 0x28800 total gadgets: 15731
ropshell> suggest "load reg" > 0x000dd237 : pop rax; ret > 0x000586e4 : pop rbx; ret > 0x000a877e : pop rcx; ret > 0x00110a7d : pop rsi; ret > 0x0010f78b : pop rdi; ret > 0x00028a91 : pop rbp; ret > 0x0003c068 : pop rsp; ret > 0x00110981 : pop r12; ret > 0x000584d9 : pop r13; ret > 0x00110a7c : pop r14; ret > 0x0010f78a : pop r15; ret > 0x000ab8a1 : pop rdx; or [rcx - 0xa], al; ret > 0x0009874e : pop r8; mov fs:[0x300], rdi; ret > 0x0012dfb6 : mov rax, [rsp]; add rsp, 0x38; ret > 0x0012dfb7 : mov eax, [rsp]; add rsp, 0x38; ret > 0x0012dfb1 : mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret > 0x0012dfb2 : mov ecx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret > 0x0012dfac : mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret > 0x0012dfad : mov edx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret > 0x000a5684 : mov esp, [rsp + 0x18]; mov rdi, [rax + 8]; call [rax] > 0x0012dfa7 : mov rsi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret > 0x0012dfa8 : mov esi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret > 0x000d8ddf : mov edi, [rsp + 0x10]; lea rsi, [rbp - 0x70]; push 1; lea r9, [rbp - 0x88]; push 0; lea rcx, [rax + 4]; call rbx > 0x0012dfa2 : mov rdi, [rsp + 0x20]; mov rsi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret