ropshell> use ec0cbdf5854bff24b533e2536a486eec (download)
name         : fiestaFTP.bak.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 3739

ropshell> suggest "load reg"
> 0x140012ef6 : pop rax; ret
> 0x1400062af : pop rbx; ret
> 0x14004dea3 : pop rcx; ret 3
> 0x140006783 : pop rsi; ret
> 0x14000609e : pop rdi; ret
> 0x1400013b7 : pop rbp; ret
> 0x1400094bf : pop rsp; ret
> 0x1400094be : pop r12; ret
> 0x140007bf4 : pop r14; ret
> 0x140040a00 : pop r15; ret
> 0x140016ade : pop r13; pop r12; pop rbp; ret
> 0x140064db6 : pop rdx; add al, [rax]; ret
> 0x1400164eb : mov rdi, [rsp + 0x10]; ret
> 0x1400164ec : mov edi, [rsp + 0x10]; ret
> 0x14004e144 : mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x14004e145 : mov ebx, [rsp + 8]; add rsp, 0x10; ret
> 0x1400164e6 : mov rbx, [rsp + 8]; mov rdi, [rsp + 0x10]; ret
> 0x14001c6a3 : mov rax, [rsp + 0x38]; call [rax + 0x10]
> 0x14003efa8 : mov rsi, [rsp + 0x20]; mov rdi, [rsp + 0x28]; pop r14; ret
> 0x14004e140 : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x14001c6a4 : mov eax, [rsp + 0x38]; call [rax + 0x10]
> 0x14004e141 : mov edx, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x14003efa9 : mov esi, [rsp + 0x20]; mov rdi, [rsp + 0x28]; pop r14; ret
> 0x140024edc : mov rcx, [rsp + 0x30]; mov rax, [rcx]; call [rax + 8]
> 0x140024edd : mov ecx, [rsp + 0x30]; mov rax, [rcx]; call [rax + 8]
> 0x14003efa3 : mov rbp, [rsp + 0x18]; mov rsi, [rsp + 0x20]; mov rdi, [rsp + 0x28]; pop r14; ret
> 0x14003efa4 : mov ebp, [rsp + 0x18]; mov rsi, [rsp + 0x20]; mov rdi, [rsp + 0x28]; pop r14; ret