ropshell> use fadb3e5e0f0200befcf977d0cccdf983 (download)
name         : pwn (x86_64/ELF)
base address : 0x400390
total gadgets: 8930

ropshell> suggest "load reg"
> 0x00423f7f : pop rax; ret 0x2c
> 0x00400e9b : pop rbx; ret
> 0x0042142b : pop rcx; ret
> 0x0044c476 : pop rdx; ret
> 0x004014a4 : pop rsi; ret
> 0x00401f0a : pop rdi; ret
> 0x004006f8 : pop rbp; ret
> 0x004005b5 : pop rsp; ret
> 0x0044c475 : pop r10; ret
> 0x004005b4 : pop r12; ret
> 0x00406729 : pop r13; ret
> 0x004014a3 : pop r14; ret
> 0x00401f09 : pop r15; ret
> 0x00422351 : pop r8; mov [rdi + 4], eax; ret
> 0x004a60c5 : mov rax, [rsp + 0x10]; add rsp, 0x28; ret
> 0x004a60c6 : mov eax, [rsp + 0x10]; add rsp, 0x28; ret
> 0x0044a0e0 : mov edi, [rsp]; call rbx
> 0x00427f48 : mov rdx, [rsp + 0x68]; call rax
> 0x00427c40 : mov rsi, [rsp + 0x48]; call rax
> 0x00450ff0 : mov rdi, [rsp + 0x10]; call r12
> 0x0047d41c : mov r9, [rsp + 0x30]; call r9
> 0x0047d41d : mov ecx, [rsp + 0x30]; call r9
> 0x00427f49 : mov edx, [rsp + 0x68]; call rax
> 0x00427c41 : mov esi, [rsp + 0x48]; call rax
> 0x004821f6 : mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x00459fa3 : mov rbp, [rsp + 0x10]; nop [rax + rax]; mov rsi, r14; mov rdi, r13; mov rdx, rbp; call r15
> 0x00459fa4 : mov ebp, [rsp + 0x10]; nop [rax + rax]; mov rsi, r14; mov rdi, r13; mov rdx, rbp; call r15
> 0x004821ec : mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x004821ed : mov ebx, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]
> 0x004821e7 : mov r10, [rsp + 0x28]; mov r11, [rsp + 0x30]; mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x40]; add rsp, 0x48; jmp [rax]