ropshell> use 14b11bf6b3b0d4d54c4f649db701a597 (download)
name         : sdstor.sys (x86_64/PE)
base address : 0x1c0001000
total gadgets: 462

ropshell> suggest "load reg"
> 0x1c0001415 : pop rax; ret
> 0x1c0001112 : pop rbx; ret
> 0x1c0002f4a : pop rdx; ret
> 0x1c0002a8b : pop rsi; ret
> 0x1c00018de : pop rdi; ret
> 0x1c0001ce9 : pop rbp; ret
> 0x1c00016bb : pop rsp; ret
> 0x1c00016ba : pop r12; ret
> 0x1c000974e : pop r13; ret
> 0x1c0002a8a : pop r14; ret
> 0x1c00068b3 : pop r15; ret
> 0x1c00050ea : mov rdi, [rsp + 0x20]; ret
> 0x1c00050eb : mov edi, [rsp + 0x20]; ret
> 0x1c00050e5 : mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret
> 0x1c00050e6 : mov esi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret
> 0x1c000b8c0 : pop rcx; add [rax], al; nop [rax + rax]; add rsp, 0x28; ret
> 0x1c00050e0 : mov rbp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret
> 0x1c00050e1 : mov ebp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret
> 0x1c00012ee : mov rax, [rsp + 0x28]; mov [r11 + 0x18], rax; mov [r11], rcx; mov [r11 + 0x10], r9; ret
> 0x1c00012ef : mov eax, [rsp + 0x28]; mov [r11 + 0x18], rax; mov [r11], rcx; mov [r11 + 0x10], r9; ret
> 0x1c00050d8 : mov rbx, [rsp + 8]; mov eax, r10d; mov rbp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret
> 0x1c00050d9 : mov ebx, [rsp + 8]; mov eax, r10d; mov rbp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret