ropshell> use acaa75aeac37f8dd789104d3fa40137a (download) name : libc_64.so (x86_64/ELF) base address : 0x1f570 total gadgets: 17368
ropshell> suggest "load reg" > 0x0003a478 : pop rax; ret > 0x00020ef7 : pop rbx; ret > 0x00127bd3 : pop rcx; ret 0x29 > 0x00114e46 : pop rdx; ret > 0x00023375 : pop rsi; ret > 0x00021922 : pop rdi; ret > 0x0001f5f6 : pop rbp; ret > 0x0001fcb4 : pop rsp; ret > 0x00114e45 : pop r10; ret > 0x0001fcb3 : pop r12; ret > 0x0001fc6c : pop r13; ret > 0x00023374 : pop r14; ret > 0x00021921 : pop r15; ret > 0x00134a06 : pop r8; mov eax, 1; ret > 0x0010a0f2 : mov rax, [rsp]; add rsp, 0x38; ret > 0x0010a0f3 : mov eax, [rsp]; add rsp, 0x38; ret > 0x001047db : mov edi, [rsp]; call rbp > 0x0012d785 : mov rbx, [rsp + 8]; call rbx > 0x00131ff1 : mov rcx, [rsp + 0x18]; call rcx > 0x0010ebcd : mov rdx, [rsp + 0x18]; call rax > 0x00084890 : mov rsi, [rsp + 0x48]; call rax > 0x000bae34 : mov rdi, [rsp + 0x10]; call r12 > 0x0012d786 : mov ebx, [rsp + 8]; call rbx > 0x00131ff2 : mov ecx, [rsp + 0x18]; call rcx > 0x0010ebce : mov edx, [rsp + 0x18]; call rax > 0x00084891 : mov esi, [rsp + 0x48]; call rax > 0x0012e033 : pop r11; sub [rax], eax; mov rax, [rdx + rax*8]; jmp rax > 0x00075af5 : mov r8, [rsp + 0x20]; lea rsi, [rdi + 0x58]; mov rdi, rax; call [rax + 8] > 0x00024808 : mov r9, [rsp + 0x18]; mov rsi, [rsp + 0x28]; mov rdi, [rsp + 0x20]; call r14 > 0x000376a6 : mov rbp, [rsp + 8]; nop [rax + rax]; mov rsi, r14; mov rdi, r13; mov rdx, rbp; call r15 > 0x000376a7 : mov ebp, [rsp + 8]; nop [rax + rax]; mov rsi, r14; mov rdi, r13; mov rdx, rbp; call r15