ropshell> use cec1138c17426f9cbc55a984f3f57397 (download)
name         : rop_me_baby.exe (x86_64/PE)
base address : 0x401000
total gadgets: 8472

ropshell> suggest "load reg"
> 0x0040b53f : pop rax; ret
> 0x00401d52 : pop rbx; ret
> 0x0040c620 : pop rcx; ret
> 0x00401ccb : pop rsi; ret
> 0x00401fdc : pop rdi; ret
> 0x004013fe : pop rbp; ret
> 0x0040352b : pop rsp; ret
> 0x0040352a : pop r12; ret
> 0x004013fd : pop r13; ret
> 0x00409f8f : pop r14; ret
> 0x00404246 : pop r15; ret
> 0x00401095 : pop rdx; xor eax, eax; add rsp, 0x28; ret
> 0x0040e542 : mov rax, [rsp + 0x28]; add rsp, 0x38; ret
> 0x0040e543 : mov eax, [rsp + 0x28]; add rsp, 0x38; ret
> 0x0046e101 : mov rcx, [rsp + 0x108]; call rax
> 0x0045971a : mov rdx, [rsp + 0xd8]; call rax
> 0x0046e102 : mov ecx, [rsp + 0x108]; call rax
> 0x0045971b : mov edx, [rsp + 0xd8]; call rax
> 0x0047037e : mov r8, [rsp + 0x80]; call [rax + 0x10]
> 0x004338c6 : mov rsi, [rsp + 0x160]; mov [rsp + 0x20], rsi; call rax
> 0x00430326 : mov rdi, [rsp + 0x110]; mov [rsp + 0x20], rdi; call rax
> 0x00470644 : mov r9, [rsp + 0x70]; mov rcx, rsi; call [rax + 0x18]
> 0x004338c7 : mov esi, [rsp + 0x160]; mov [rsp + 0x20], rsi; call rax
> 0x00430327 : mov edi, [rsp + 0x110]; mov [rsp + 0x20], rdi; call rax
> 0x00487c61 : pop r8; add [rax], al; add [rax], al; mov [rcx + 0x60], 0; mov [rcx + 0x6f], 0; ret
> 0x0040cc0e : mov rbx, [rsp + 0x60]; mov [rbx], rcx; lea rdx, [rbx + 8]; mov r8, rsi; call r12
> 0x0040cc0f : mov ebx, [rsp + 0x60]; mov [rbx], rcx; lea rdx, [rbx + 8]; mov r8, rsi; call r12