ropshell> use 1df4ce32afb2f7897a554b9cbe432382 (download) name : libc.so.6 (x86_64/ELF) base address : 0x263c0 total gadgets: 16124
ropshell> suggest "load reg" > 0x0003f587 : pop rax; ret > 0x00031e2d : pop rbx; ret > 0x00036bbb : pop rcx; ret > 0x000fd6bd : pop rdx; ret > 0x00029419 : pop rsi; ret > 0x00027c65 : pop rdi; ret > 0x00027b6c : pop rbp; ret > 0x000278ea : pop rsp; ret > 0x000278e9 : pop r12; ret > 0x00029cb0 : pop r13; ret > 0x00029418 : pop r14; ret > 0x00027c64 : pop r15; ret > 0x0010318f : pop r11; pop rbp; pop r12; ret > 0x00084c2a : pop r8; mov fs:[0x300], rdi; ret > 0x000f5bdb : mov rax, [rsp]; add rsp, 0x28; ret > 0x000f8364 : mov eax, [rsp]; add rsp, 0x18; ret > 0x0013bded : mov rcx, [rsp + 0x10]; call rcx > 0x0009e370 : mov rdx, [rsp + 0x10]; mov [rax], rdx; ret > 0x000bd0d2 : mov rsi, [rsp + 0x18]; call rbp > 0x00028225 : mov r9, [rsp + 0x28]; call r15 > 0x0013bdee : mov ecx, [rsp + 0x10]; call rcx > 0x0009e371 : mov edx, [rsp + 0x10]; mov [rax], rdx; ret > 0x000bd0d3 : mov esi, [rsp + 0x18]; call rbp > 0x000fd45c : mov ebp, [rsp]; mov rax, rbp; pop rbx; pop rbp; pop r12; ret > 0x000d0166 : mov rdi, [rsp + 0x18]; mov esi, ebp; call r13 > 0x000d0167 : mov edi, [rsp + 0x18]; mov esi, ebp; call r13 > 0x00142ddb : mov rbx, [rsp + 0x30]; mov rax, [rdi + 0x38]; mov rsi, rbx; call [rax + 8] > 0x00143473 : mov rbp, [rsp + 0x30]; mov rsi, rbx; mov rax, [rdi + 0x38]; call [rax + 0x10] > 0x00142ddc : mov ebx, [rsp + 0x30]; mov rax, [rdi + 0x38]; mov rsi, rbx; call [rax + 8] > 0x0013fcaa : mov r12, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10] > 0x0013fcab : mov esp, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10] > 0x00052cd3 : movsxd r8, [rsp + 0x18]; mov rdi, rbp; sub rsi, rax; mov rax, [rip + 0x181bcb]; mov rcx, r13; call [rax + r8*8] > 0x0013fca5 : mov r13, [rsp + 0x38]; mov r12, [rsp + 0x40]; mov rsi, rbp; mov rdi, [rax]; mov rax, [rdi + 0x38]; call [rax + 0x10]