ropshell> use aeba656383c3f8dde0efcad170dfd369 (download)
name         : twoplustwo (x86_64/ELF)
base address : 0x3750
total gadgets: 3008

ropshell> suggest "load mem"
> 0x0001282d : mov eax, [rdx + rax]; pop rbp; ret
> 0x00005172 : mov rdx, [rax]; mov rax, [rbp - 8]; mov [rax], rdx; nop ; pop rbp; ret
> 0x00005173 : mov edx, [rax]; mov rax, [rbp - 8]; mov [rax], rdx; nop ; pop rbp; ret
> 0x000309d2 : mov rdx, [rax + 8]; mov rax, [rbp - 8]; mov [rax], rdx; nop ; pop rbp; ret
> 0x000309d3 : mov edx, [rax + 8]; mov rax, [rbp - 8]; mov [rax], rdx; nop ; pop rbp; ret
> 0x0000bdeb : mov rcx, [rdx + 0x20]; mov rdx, [rbp - 0x18]; mov rsi, [rbp - 0x10]; mov rdi, rcx; call rax
> 0x0000bdec : mov ecx, [rdx + 0x20]; mov rdx, [rbp - 0x18]; mov rsi, [rbp - 0x10]; mov rdi, rcx; call rax
> 0x0002e6ae : mov rbx, [rax + 0x10]; mov rcx, [rbp - 0x38]; mov rdx, [rbp - 0x28]; mov rax, [rbp - 0x30]; mov rsi, rcx; mov rdi, rdx; call rax
> 0x0002e6af : mov ebx, [rax + 0x10]; mov rcx, [rbp - 0x38]; mov rdx, [rbp - 0x28]; mov rax, [rbp - 0x30]; mov rsi, rcx; mov rdi, rdx; call rax
> 0x000264d2 : mov rax, [rdx + rax]; mov [rbp - 8], rax; mov rdx, [rbp - 0x10]; mov rax, [rbp - 8]; mov [rbp - 0x30], rdx; movsd xmm0, [rbp - 0x30]; call rax