ropshell> use 3c94bcda2a65e71413d3fee2b4be913e (download)
name         : tcpip.sys (x86_64/PE)
base address : 0x1c0001000
total gadgets: 6847

ropshell> suggest "load reg"
> 0x1c001c359 : pop rax; ret
> 0x1c0001959 : pop rbx; ret
> 0x1c001c1de : pop rdx; ret
> 0x1c00010f6 : pop rsi; ret
> 0x1c0001c9b : pop rdi; ret
> 0x1c0001541 : pop rbp; ret
> 0x1c0003d3f : pop rsp; ret
> 0x1c0003d3e : pop r12; ret
> 0x1c0031266 : pop r13; ret
> 0x1c0001694 : pop r14; ret
> 0x1c002f2c5 : pop r15; ret
> 0x1c00cb347 : mov rbx, [rsp + 8]; ret
> 0x1c01afa7c : mov rsi, [rsp + 0x10]; ret
> 0x1c0066ad6 : mov rdi, [rsp + 0x10]; ret
> 0x1c00cb348 : mov ebx, [rsp + 8]; ret
> 0x1c01afa7d : mov esi, [rsp + 0x10]; ret
> 0x1c0066ad7 : mov edi, [rsp + 0x10]; ret
> 0x1c0190413 : pop rcx; or [r8], eax; add rsp, 0x48; ret
> 0x1c015fabf : mov rax, [rsp + 0x30]; add rsp, 0x28; ret
> 0x1c015fac0 : mov eax, [rsp + 0x30]; add rsp, 0x28; ret
> 0x1c002b143 : mov rbp, [rsp + 0x20]; mov rsi, [rsp + 0x28]; pop rdi; ret
> 0x1c0030604 : mov ecx, [rsp + 0x38]; mov [rdx], ecx; add rsp, 0x48; ret
> 0x1c003159c : mov edx, [rsp + 0x50]; mov [rcx], rdx; add rsp, 0x68; ret
> 0x1c002b144 : mov ebp, [rsp + 0x20]; mov rsi, [rsp + 0x28]; pop rdi; ret
> 0x1c0031594 : mov rcx, [rsp + 0xa8]; mov edx, [rsp + 0x50]; mov [rcx], rdx; add rsp, 0x68; ret