ropshell> use 5d2c830143ffb8d266c8f8ddfd29fde8 (download) name : ch75.exe (x86_64/PE) base address : 0x140001000 total gadgets: 1177
ropshell> suggest "load reg" > 0x1400100d5 : pop rax; ret > 0x14000167b : pop rbx; ret > 0x140002f65 : pop rsi; ret > 0x140001255 : pop rdi; ret > 0x140001990 : pop rbp; ret > 0x1400045d7 : pop rsp; ret > 0x1400045d6 : pop r12; ret > 0x140006346 : pop r13; ret > 0x140002f64 : pop r14; ret > 0x140009ce6 : pop r15; ret > 0x1400115fa : mov rbx, [rsp + 8]; ret > 0x1400115fb : mov ebx, [rsp + 8]; ret > 0x140001125 : mov eax, [rsp]; add rsp, 0x18; ret > 0x140001194 : mov rax, [rsp + 0x20]; add rsp, 0x38; ret > 0x14000da96 : mov rdi, [rsp + 0x30]; pop r15; pop r14; ret > 0x14000da97 : mov edi, [rsp + 0x30]; pop r15; pop r14; ret > 0x14000da91 : mov rsi, [rsp + 0x28]; mov rdi, [rsp + 0x30]; pop r15; pop r14; ret > 0x14000da92 : mov esi, [rsp + 0x28]; mov rdi, [rsp + 0x30]; pop r15; pop r14; ret > 0x14000da8c : mov rbp, [rsp + 0x20]; mov rsi, [rsp + 0x28]; mov rdi, [rsp + 0x30]; pop r15; pop r14; ret > 0x14000da8d : mov ebp, [rsp + 0x20]; mov rsi, [rsp + 0x28]; mov rdi, [rsp + 0x30]; pop r15; pop r14; ret