ropshell> use 1dad723040b3b62f1c60c1942826704f (download)
name         : ecw.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 6333

ropshell> suggest
call
    > 0x140030daa : call rax
    > 0x140006ca2 : call rbx
    > 0x140036695 : call rcx
    > 0x140069e06 : call rdx
    > 0x140032e88 : call rsi
jmp
    > 0x140027284 : push rsp; ret
    > 0x14000907d : jmp rax
    > 0x140030605 : jmp rcx
    > 0x140030ac9 : jmp rdx
    > 0x140062c6d : jmp rbp
load mem
    > 0x140065998 : mov rax, [rcx]; ret
    > 0x140001dbc : mov eax, [rcx]; ret
    > 0x140003684 : mov rax, [rcx + 0x10]; ret
    > 0x1400022b0 : mov eax, [rcx + 0x10]; ret
    > 0x1400462e2 : mov rcx, [r9]; inc [rcx]; ret
load reg
    > 0x140003a6e : pop rax; ret
    > 0x14000132c : pop rbx; ret
    > 0x140013603 : pop rcx; ret
    > 0x14001b4be : pop rdx; ret
    > 0x140002be8 : pop rsi; ret
pop pop ret
    > 0x140004d49 : pop r12; ret
    > 0x140008c17 : pop r12; pop rbp; ret
    > 0x140027880 : pop r12; pop rdi; pop rbp; ret
    > 0x140010115 : pop r12; pop rdi; pop rbx; pop rbp; ret
    > 0x14002120b : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x1400072e0 : add rsp, 0x18; ret
    > 0x1400072e0 : add rsp, 0x18; ret
    > 0x140001194 : add rsp, 0x28; ret
    > 0x14000194d : add rsp, 0x38; ret
    > 0x140002838 : add rsp, 0x48; ret
stack pivoting
    > 0x14000766f : xchg eax, esp; ret
    > 0x14003a7d6 : mov rsp, r11; pop r14; ret
    > 0x14003a7d7 : mov esp, ebx; pop r14; ret
    > 0x140038a9b : lea esp, [rax - 0x18000000]; ret
    > 0x1400721d6 : lea rsp, [rbp + 0x10]; pop rbp; ret
write mem
    > 0x1400091c5 : add [rcx], rax; ret
    > 0x140014895 : add [rcx], rdx; ret
    > 0x1400091c6 : add [rcx], eax; ret
    > 0x140014896 : add [rcx], edx; ret
    > 0x14003d49a : adc [rdx], eax; ret