ropshell> use a90a0dd472e75a0e34cd6a4b0627a9b1 (download) name : main (x86_64/ELF) base address : 0x401180 total gadgets: 6282
ropshell> suggest "load reg" > 0x00427e2b : pop rax; ret > 0x0046b417 : pop rbx; ret > 0x00477d5d : pop rsi; ret > 0x004787d3 : pop rdi; ret > 0x0040177a : pop rbp; ret > 0x004373a8 : pop rsp; ret > 0x0047ce29 : pop r12; ret > 0x0047a345 : pop r13; ret > 0x00477d5c : pop r14; ret > 0x004787d2 : pop r15; ret > 0x0047ad7c : pop rcx; jmp rcx > 0x004773f6 : mov rax, [rsp]; add rsp, 0x38; ret > 0x004773f7 : mov eax, [rsp]; add rsp, 0x38; ret > 0x00417c92 : pop rdx; add [rax], al; cmovne rax, rdx; ret > 0x00466d14 : mov rbx, [rsp]; add rsp, 0x18; jmp r11 > 0x00466d15 : mov ebx, [rsp]; add rsp, 0x18; jmp r11 > 0x0047b4c1 : mov rdi, [rsp + 8]; mov rax, [rsp + 0x10]; call rax > 0x0047b4c2 : mov edi, [rsp + 8]; mov rax, [rsp + 0x10]; call rax > 0x0047b4be : mov edx, [rsp]; mov rdi, [rsp + 8]; mov rax, [rsp + 0x10]; call rax > 0x00466d08 : mov rcx, [rsp + 8]; mov rax, [rsp]; mov rsp, rbx; mov rbx, [rsp]; add rsp, 0x18; jmp r11 > 0x00466d09 : mov ecx, [rsp + 8]; mov rax, [rsp]; mov rsp, rbx; mov rbx, [rsp]; add rsp, 0x18; jmp r11 > 0x0040e079 : pop r8; mov rax, [rdi + 0x18]; punpckhqdq xmm0, xmm0; mov [rdi + 0x18], rdx; mov [rdi + 0x48], rax; movups xmm[rdi + 8], xmm0; ret > 0x00466d03 : mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; mov rsp, rbx; mov rbx, [rsp]; add rsp, 0x18; jmp r11