ropshell> use e9c73db4de762910c572a97827776de6 (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x243c0
total gadgets: 19536

ropshell> suggest "load reg"
> 0x000d6a27 : pop rax; ret
> 0x000546e6 : pop rbx; ret
> 0x0007af33 : pop rcx; ret
> 0x000257f8 : pop rbp; ret
> 0x00037005 : pop rsp; ret
> 0x00105f37 : pop r12; ret
> 0x000275ed : pop rsi; pop rbp; ret
> 0x00027fe2 : pop rdi; pop rbp; ret
> 0x000257f6 : pop r13; pop rbp; ret
> 0x000275ec : pop r14; pop rbp; ret
> 0x00027fe1 : pop r15; pop rbp; ret
> 0x000e54e8 : pop rdx; sbb al, 0x7d; ret
> 0x00094c1e : pop r8; mov fs:[0x300], rdi; ret
> 0x0011b04c : pop r11; pop r12; pop r13; pop r14; pop rbp; ret
> 0x00120b86 : mov rax, [rsp]; add rsp, 0x38; ret
> 0x00120b87 : mov eax, [rsp]; add rsp, 0x38; ret
> 0x0010623b : mov rbp, [rsp + 0x28]; add rsp, 0x38; ret
> 0x00109675 : mov r13, [rsp + 0xa0]; add rsp, 0xb8; ret
> 0x00109d30 : mov r14, [rsp + 0x118]; add rsp, 0x128; ret
> 0x001076e7 : mov r15, [rsp + 0x120]; add rsp, 0x128; ret
> 0x00109d31 : mov esi, [rsp + 0x118]; add rsp, 0x128; ret
> 0x001076e8 : mov edi, [rsp + 0x120]; add rsp, 0x128; ret
> 0x0010623c : mov ebp, [rsp + 0x28]; add rsp, 0x38; ret
> 0x00105df9 : mov rbx, [rsp + 0x20]; mov eax, edx; add rsp, 0x28; ret
> 0x00105dfa : mov ebx, [rsp + 0x20]; mov eax, edx; add rsp, 0x28; ret
> 0x00120b81 : mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x000a0a46 : mov r9, [rsp + 0x10]; mov [rsp + 8], r11; syscall ; ret
> 0x000a0a47 : mov ecx, [rsp + 0x10]; mov [rsp + 8], r11; syscall ; ret
> 0x00106236 : mov r12, [rsp + 0x30]; mov rbp, [rsp + 0x28]; add rsp, 0x38; ret
> 0x00106237 : mov esp, [rsp + 0x30]; mov rbp, [rsp + 0x28]; add rsp, 0x38; ret
> 0x00120b7c : mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x000a0a41 : mov r8, [rsp + 8]; mov r9, [rsp + 0x10]; mov [rsp + 8], r11; syscall ; ret
> 0x00120b7d : mov edx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x00120b77 : mov rsi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x00120b72 : mov rdi, [rsp + 0x20]; mov rsi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret