ropshell> use cac294ad0dceaacfb968152e4edffc2f (download)
name         : libc (x86_64/ELF)
base address : 0x22700
total gadgets: 14959

ropshell> suggest "load reg"
> 0x0003fa43 : pop rax; ret
> 0x0002f1d1 : pop rbx; ret
> 0x00099a83 : pop rcx; ret
> 0x00166262 : pop rdx; ret
> 0x000251be : pop rsi; ret
> 0x00023b65 : pop rdi; ret
> 0x00023a60 : pop rbp; ret
> 0x0002eb31 : pop rsp; ret
> 0x0002eb30 : pop r12; ret
> 0x00037618 : pop r13; ret
> 0x000251bd : pop r14; ret
> 0x00023b64 : pop r15; ret
> 0x0011960f : pop r11; pop rbp; pop r12; ret
> 0x0008c3de : pop r8; mov fs:[0x300], rdi; ret
> 0x0010ad2b : mov rax, [rsp]; add rsp, 0x28; ret
> 0x0010d624 : mov eax, [rsp]; add rsp, 0x18; ret
> 0x001180c4 : mov edi, [rsp]; call rbp
> 0x001578f5 : mov rcx, [rsp + 0x10]; call rcx
> 0x000a7b38 : mov rdx, [rsp + 0x10]; mov [rax], rdx; ret
> 0x000bd2b2 : mov rsi, [rsp + 0x10]; call rbx
> 0x0016d7ed : mov rdi, [rsp + 0x18]; call rax
> 0x00024255 : mov r9, [rsp + 0x28]; call r15
> 0x001578f6 : mov ecx, [rsp + 0x10]; call rcx
> 0x000a7b39 : mov edx, [rsp + 0x10]; mov [rax], rdx; ret
> 0x000bd2b3 : mov esi, [rsp + 0x10]; call rbx
> 0x00112cd0 : mov ebp, [rsp]; mov rax, rbp; pop rbx; pop rbp; pop r12; ret
> 0x0015f448 : mov rbx, [rsp + 0x28]; mov rax, [rdi + 0x38]; mov rsi, rbx; call [rax + 8]
> 0x0015fabd : mov rbp, [rsp + 0x28]; mov rsi, rbx; mov rax, [rdi + 0x38]; call [rax + 0x10]
> 0x0015f449 : mov ebx, [rsp + 0x28]; mov rax, [rdi + 0x38]; mov rsi, rbx; call [rax + 8]
> 0x0015bf2a : mov r12, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10]
> 0x0015bf2b : mov esp, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10]
> 0x000558a3 : movsxd r8, [rsp + 0x18]; mov rdi, rbp; sub rsi, rax; mov rax, [rip + 0x1a1fdb]; mov rcx, r13; call [rax + r8*8]
> 0x0015bf25 : mov r13, [rsp + 0x38]; mov r12, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10]