ropshell> use 986cedc30c8b1f07eefbecfb0aceaf87 (download) name : libsystem_c.dylib (x86_64/RAW) base address : 0x0 total gadgets: 9158
ropshell> suggest "load reg" > 0x00020371 : pop rcx; ret > 0x000da174 : pop rdx; ret > 0x000e14c6 : pop rsi; ret 5 > 0x000b353f : pop rdi; ret > 0x00002660 : pop rbp; ret > 0x000202c1 : pop rsp; ret > 0x000da4bd : pop rax; pop rbp; ret > 0x00002985 : pop rbx; pop rbp; ret > 0x00002b82 : pop r14; pop rbp; ret > 0x00002d07 : pop r15; pop rbp; ret > 0x0000593f : pop r12; pop r14; pop r15; pop rbp; ret > 0x00002d03 : pop r13; pop r14; pop r15; pop rbp; ret > 0x00150fab : mov esp, [rsp + rax]; ret > 0x000b353b : mov eax, [rsp + 8]; pop rdi; ret > 0x00002659 : mov rax, [rsp]; mov rsp, rbp; pop rbp; ret > 0x000b3724 : mov ecx, [rsp + 4]; add eax, edx; sub eax, ecx; ret > 0x00063c69 : mov esi, [rsp + 8]; xor al, al; call r14 > 0x00002654 : mov rdi, [rsp + 8]; mov rax, [rsp]; mov rsp, rbp; pop rbp; ret > 0x00002655 : mov edi, [rsp + 8]; mov rax, [rsp]; mov rsp, rbp; pop rbp; ret > 0x0000264f : mov rsi, [rsp + 0x10]; mov rdi, [rsp + 8]; mov rax, [rsp]; mov rsp, rbp; pop rbp; ret > 0x0000264a : mov rdx, [rsp + 0x18]; mov rsi, [rsp + 0x10]; mov rdi, [rsp + 8]; mov rax, [rsp]; mov rsp, rbp; pop rbp; ret > 0x0000264b : mov edx, [rsp + 0x18]; mov rsi, [rsp + 0x10]; mov rdi, [rsp + 8]; mov rax, [rsp]; mov rsp, rbp; pop rbp; ret > 0x00070edc : mov ebp, [rsp + 8]; mov rbx, r15; sub rbx, [r12 + 0x10]; mov rdi, [r12 + 0x18]; mov rsi, rbx; mov rdx, r14; call r13