ropshell> use 36354d9b5b0a58a4b9a19103852c00a2 (download)
name         : msvcrt.dll (x86_64/PE)
base address : 0x110101000
total gadgets: 2579

ropshell> suggest "load reg"
> 0x1101068fb : pop rax; ret
> 0x11010110e : pop rbx; ret
> 0x1101698b8 : pop rcx; ret
> 0x110169687 : pop rdx; ret
> 0x11010244a : pop rsi; ret
> 0x11010118c : pop rdi; ret
> 0x1101022f3 : pop rbp; ret
> 0x11010313f : pop rsp; ret
> 0x11010313e : pop r12; ret
> 0x11011aa97 : pop r13; ret
> 0x110102449 : pop r14; ret
> 0x110120e6d : pop r15; ret
> 0x11012f551 : mov rax, [rsp + 0x18]; ret
> 0x11015b0f6 : mov rbx, [rsp + 8]; ret
> 0x110102a00 : mov rdi, [rsp + 0x10]; ret
> 0x110150242 : mov r14, [rsp + 0x18]; ret
> 0x11012f552 : mov eax, [rsp + 0x18]; ret
> 0x11015b0f7 : mov ebx, [rsp + 8]; ret
> 0x110150243 : mov esi, [rsp + 0x18]; ret
> 0x110102a01 : mov edi, [rsp + 0x10]; ret
> 0x1101732c3 : mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x110102eb6 : mov rsi, [rsp + 0x10]; mov rdi, [rsp + 0x18]; ret
> 0x11012bef9 : mov rcx, [rsp + 0x30]; call [rip + 0x4b524]; add rsp, 0x28; ret
> 0x1101732bf : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x11012befa : mov ecx, [rsp + 0x30]; call [rip + 0x4b524]; add rsp, 0x28; ret
> 0x1101732c0 : mov edx, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x110149844 : mov r8, [rsp + 0x90]; mov rax, r10; call [rip + 0x2dc0b]; add rsp, 0x68; ret
> 0x1101520d9 : mov rbp, [rsp + 0x10]; mov rdi, [rsp + 0x18]; mov r14, [rsp + 0x20]; ret
> 0x1101520da : mov ebp, [rsp + 0x10]; mov rdi, [rsp + 0x18]; mov r14, [rsp + 0x20]; ret
> 0x11012bef4 : mov rdx, [rsp + 0x38]; mov rcx, [rsp + 0x30]; call [rip + 0x4b524]; add rsp, 0x28; ret