ropshell> use fc3391a5231682273c849d213abb05ea (download)
name         : kernel32.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 2694

ropshell> suggest "load reg"
> 0x1800022fc : pop rax; ret
> 0x180001bc4 : pop rbx; ret
> 0x180029dfc : pop rdx; ret
> 0x180001a09 : pop rsi; ret
> 0x180001144 : pop rdi; ret
> 0x1800013ff : pop rbp; ret
> 0x180004cf2 : pop rsp; ret
> 0x180004cf1 : pop r12; ret
> 0x180015f7e : pop r13; ret
> 0x18000369c : pop r14; ret
> 0x18000f752 : pop r15; ret
> 0x1800220a2 : mov rax, [rsp + 8]; ret
> 0x1800084cd : mov rbx, [rsp + 8]; ret
> 0x18000a6e8 : mov rdi, [rsp + 0x10]; ret
> 0x1800220a3 : mov eax, [rsp + 8]; ret
> 0x1800084ce : mov ebx, [rsp + 8]; ret
> 0x18000a6e9 : mov edi, [rsp + 0x10]; ret
> 0x180043677 : pop rcx; pop rdi; add al, [rax]; add rsp, 0x38; ret
> 0x180021dc0 : mov r14, [rsp + 0x20]; mov [r10], r9d; ret
> 0x180021dc1 : mov esi, [rsp + 0x20]; mov [r10], r9d; ret
> 0x1800235f5 : mov rsi, [rsp + 0x10]; mov rdi, [rsp + 0x18]; ret
> 0x1800055dd : movzx edx, [rsp + 0x68]; mov [rcx], edx; add rsp, 0x48; ret
> 0x1800035cc : movzx ecx, [rsp + 0x60]; mov [rax], ecx; xor eax, eax; add rsp, 0x48; ret
> 0x180060173 : mov rcx, [rsp + 0x30]; call [rip + 0x25ab1]; nop [rax + rax]; add rsp, 0x28; ret
> 0x1800515de : mov rbp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret
> 0x1800515df : mov ebp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret