ropshell> use c9dba162d90f403aabdda17b56261b0c (download)
name         : 3x17 (x86_64/ELF)
base address : 0x4010d0
total gadgets: 8821

ropshell> suggest "load reg"
> 0x0041e4af : pop rax; ret
> 0x00401e0b : pop rbx; ret
> 0x00446e35 : pop rdx; ret
> 0x00406c30 : pop rsi; ret
> 0x00401696 : pop rdi; ret
> 0x00401b2d : pop rbp; ret
> 0x00402ba9 : pop rsp; ret
> 0x0044a2e5 : pop r10; ret
> 0x00402bcd : pop r12; ret
> 0x0040ecf2 : pop r13; ret
> 0x00406c2f : pop r14; ret
> 0x00401695 : pop r15; ret
> 0x004360a5 : pop rcx; jmp [rdx - 0x2f]
> 0x004870f1 : mov rax, [rsp]; add rsp, 0x38; ret
> 0x004870f2 : mov eax, [rsp]; add rsp, 0x38; ret
> 0x00470cda : mov edi, [rsp]; call rbp
> 0x0047f058 : mov rdx, [rsp + 0x10]; call rdx
> 0x004465a2 : mov rsi, [rsp + 0x18]; call rbp
> 0x00458e8b : mov rdi, [rsp + 0x18]; call rbx
> 0x0047f059 : mov edx, [rsp + 0x10]; call rdx
> 0x004465a3 : mov esi, [rsp + 0x18]; call rbp
> 0x0047e586 : mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x0047e587 : mov ecx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x004169ca : pop r8; add [rax], al; add [rax], al; movups xmm[rbx + 0x48], xmm0; pop rbx; ret
> 0x00454d6f : mov r9, [rsp + 0x20]; mov rsi, [rsp + 0x40]; mov rdi, [rsp + 0x38]; call r14
> 0x00458f91 : mov rbx, [rsp + 8]; nop cs:[rax + rax]; mov rsi, r14; mov rdi, r15; mov rdx, r13; call rbp
> 0x00458f92 : mov ebx, [rsp + 8]; nop cs:[rax + rax]; mov rsi, r14; mov rdi, r15; mov rdx, r13; call rbp
> 0x0047e57c : mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x00455c62 : mov r8, [rsp + 0x40]; mov rdx, [rsp + 0x48]; mov rsi, [rsp + 0x38]; mov rdi, [rsp + 0x30]; call rbp
> 0x0047e577 : mov r10, [rsp + 0x28]; mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]