ropshell> use b96c7fbfdfc1065aefdcbea3bd91196e (download)
name         : libc-2.21.so (x86_64/ELF)
base address : 0x1f4f0
total gadgets: 16722

ropshell> suggest "load reg"
> 0x000366d8 : pop rax; ret
> 0x00020be7 : pop rbx; ret
> 0x000f4f05 : pop rdx; ret
> 0x00022c05 : pop rsi; ret
> 0x00021272 : pop rdi; ret
> 0x0001f576 : pop rbp; ret
> 0x0001fc34 : pop rsp; ret
> 0x000f4f04 : pop r10; ret
> 0x0001fc33 : pop r12; ret
> 0x0001fbec : pop r13; ret
> 0x00022c04 : pop r14; ret
> 0x00021271 : pop r15; ret
> 0x000d153a : pop rcx; pop rbx; ret
> 0x00111916 : pop r8; mov eax, 1; ret
> 0x000eb402 : mov rax, [rsp]; add rsp, 0x38; ret
> 0x0007b150 : mov rsi, [rsp]; jmp rax
> 0x000eb403 : mov eax, [rsp]; add rsp, 0x38; ret
> 0x0007b151 : mov esi, [rsp]; jmp rax
> 0x00035186 : mov edi, [rsp]; call r14
> 0x0010b4f5 : mov rbx, [rsp + 8]; call rbx
> 0x0010f471 : mov rcx, [rsp + 0x18]; call rcx
> 0x00028cf8 : mov rdi, [rsp + 0x10]; call rbp
> 0x0010b4f6 : mov ebx, [rsp + 8]; call rbx
> 0x0010f472 : mov ecx, [rsp + 0x18]; call rcx
> 0x000f090f : mov rdx, [rsp + 0x10]; mov edi, 0x2000004; call rax
> 0x000f0910 : mov edx, [rsp + 0x10]; mov edi, 0x2000004; call rax
> 0x000d8e87 : mov r10, [rsp + 0x18]; movsxd rdx, [rax + rdx*4]; add rax, rdx; jmp rax
> 0x0006ec65 : mov r8, [rsp + 0x20]; lea rsi, [rdi + 0x58]; mov rdi, rax; call [rax + 8]
> 0x00024b70 : mov r9, [rsp + 0x18]; mov rsi, [rsp + 0x28]; mov rdi, [rsp + 0x20]; call r14