ropshell> use 00dfcfa3da8c5e7c15e89a1a2ed510d6 (download)
name         : ntdll.dll (x86_64/RAW)
base address : 0x0
total gadgets: 12489

ropshell> suggest "load reg"
> 0x0006bef2 : pop rax; ret
> 0x000282f9 : pop rbx; ret
> 0x0001c981 : pop rcx; ret
> 0x00010940 : pop rdx; ret
> 0x00026c8d : pop rsi; ret
> 0x0004ae56 : pop rdi; ret
> 0x0002155a : pop rbp; ret
> 0x0008f2eb : pop rsp; ret
> 0x000db119 : pop r8; ret
> 0x000dbcb2 : pop r13; ret 0x24
> 0x000856e6 : pop r15; ret
> 0x000bfd04 : pop r11; pop rbp; ret 4
> 0x000efdab : pop r14; pop rbx; pop rcx; ret
> 0x000777bb : mov eax, [rsp + 4]; ret
> 0x000794dd : pop r9; jmp [rbx]
> 0x00078466 : mov ecx, [rsp + 4]; sub eax, ecx; ret
> 0x000880a2 : mov edx, [rsp + 0x1c];  cmpxchg8b [rbp]; pop rbp; pop rbx; ret 0x14
> 0x000b05f9 : pop r12; add [rax], al; xor eax, eax; pop rdi; pop rsi; pop rcx; ret
> 0x000d3e07 : mov esi, [rsp + 0x38]; mov ecx, esi; push rbx; call [rip + 0x4b3a11e0]; call rsi
> 0x0010378b : mov ebx, [rsp + 0x18]; xor eax, eax; push rax; push rax; mov ecx, ebx; call [rip + 0x4b3a11e0]; call rbx
> 0x000d4759 : mov edi, [rsp + 0x14]; push [rsp + 0x18]; mov ecx, edi; push rax; call [rip + 0x4b3a11e0]; call rdi