ropshell> use c3629593c6c1f9079dfe6bcd66d85b77 (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x26380
total gadgets: 15898

ropshell> suggest "load reg"
> 0x0003f197 : pop rax; ret
> 0x000319ad : pop rbx; ret
> 0x001020b7 : pop rcx; ret
> 0x000fde7d : pop rdx; ret
> 0x00028f99 : pop rsi; ret
> 0x000277e5 : pop rdi; ret
> 0x000276ec : pop rbp; ret
> 0x0002746a : pop rsp; ret
> 0x00027469 : pop r12; ret
> 0x00029830 : pop r13; ret
> 0x00028f98 : pop r14; ret
> 0x000277e4 : pop r15; ret
> 0x00103a3f : pop r11; pop rbp; pop r12; ret
> 0x000859ea : pop r8; mov fs:[0x300], rdi; ret
> 0x000f639b : mov rax, [rsp]; add rsp, 0x28; ret
> 0x000f8b24 : mov eax, [rsp]; add rsp, 0x18; ret
> 0x0013c00d : mov rcx, [rsp + 0x10]; call rcx
> 0x0009f030 : mov rdx, [rsp + 0x10]; mov [rax], rdx; ret
> 0x000bdd12 : mov rsi, [rsp + 0x18]; call rbp
> 0x0014f1ed : mov rdi, [rsp + 0x18]; call rax
> 0x00027da5 : mov r9, [rsp + 0x28]; call r15
> 0x0013c00e : mov ecx, [rsp + 0x10]; call rcx
> 0x0009f031 : mov edx, [rsp + 0x10]; mov [rax], rdx; ret
> 0x000bdd13 : mov esi, [rsp + 0x18]; call rbp
> 0x0014f1ee : mov edi, [rsp + 0x18]; call rax
> 0x000fdc1c : mov ebp, [rsp]; mov rax, rbp; pop rbx; pop rbp; pop r12; ret
> 0x00143007 : mov rbx, [rsp + 0x40]; mov rax, [rdi + 0x38]; mov rsi, rbx; call [rax + 8]
> 0x00143693 : mov rbp, [rsp + 0x40]; mov rsi, rbx; mov rax, [rdi + 0x38]; call [rax + 0x10]
> 0x00143008 : mov ebx, [rsp + 0x40]; mov rax, [rdi + 0x38]; mov rsi, rbx; call [rax + 8]
> 0x0013feca : mov r12, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10]
> 0x0013fecb : mov esp, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10]
> 0x00052753 : movsxd r8, [rsp + 0x18]; mov rdi, rbp; sub rsi, rax; mov rax, [rip + 0x18112b]; mov rcx, r13; call [rax + r8*8]
> 0x0013fec5 : mov r13, [rsp + 0x38]; mov r12, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10]