ropshell> use 8e66be0a3125f7c3c5a2d303da18c35c (download)
name         : libc.so.6 (x86_64/ELF)
base address : 0x287c0
total gadgets: 17230

ropshell> suggest "load reg"
> 0x000e5dc7 : pop rax; ret
> 0x0005c4f4 : pop rbx; ret
> 0x00125a8b : pop rcx; ret
> 0x0005c2e7 : pop rsi; ret
> 0x0011bc7a : pop rdi; ret
> 0x00028a8d : pop rbp; ret
> 0x0003ca45 : pop rsp; ret
> 0x0005c2e6 : pop r14; ret
> 0x0011bc79 : pop r15; ret
> 0x0005c2e4 : pop r12; pop r14; ret
> 0x0011cf38 : pop r13; pop r14; ret
> 0x000e873d : pop rdx; xor eax, eax; ret
> 0x000a077e : pop r8; mov fs:[0x300], rdi; ret
> 0x00134d3c : pop r11; pop r12; pop r13; pop r14; pop rbp; ret
> 0x0013b1a6 : mov rax, [rsp]; add rsp, 0x38; ret
> 0x0013b1a7 : mov eax, [rsp]; add rsp, 0x38; ret
> 0x00135c78 : mov edi, [rsp]; call rbx
> 0x0013b1a1 : mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x000aca76 : mov r9, [rsp + 0x10]; mov [rsp + 8], r11; syscall ; ret
> 0x000aca77 : mov ecx, [rsp + 0x10]; mov [rsp + 8], r11; syscall ; ret
> 0x0013b19c : mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x000aca71 : mov r8, [rsp + 8]; mov r9, [rsp + 0x10]; mov [rsp + 8], r11; syscall ; ret
> 0x0013b19d : mov edx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x0013b197 : mov rsi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x0013b198 : mov esi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret
> 0x0013b192 : mov rdi, [rsp + 0x20]; mov rsi, [rsp + 0x18]; mov rdx, [rsp + 0x10]; mov rcx, [rsp + 8]; mov rax, [rsp]; add rsp, 0x38; ret