ropshell> use 6a15026ec4076ad81938e7d5b5365d10 (download) name : d3d11.dll (x86_64/PE) base address : 0x180001000 total gadgets: 6922
ropshell> suggest "load reg" > 0x18000153b : pop rax; ret > 0x180001845 : pop rbx; ret > 0x180025913 : pop rcx; ret > 0x1800a85ea : pop rdx; ret 2 > 0x18000237c : pop rsi; ret > 0x180001a5b : pop rdi; ret > 0x180001500 : pop rbp; ret > 0x180002651 : pop rsp; ret > 0x180054e9c : pop r8; ret > 0x180002650 : pop r12; ret > 0x1800024f4 : pop r13; ret > 0x1800027a9 : pop r14; ret > 0x180002913 : pop r15; ret > 0x180004a55 : mov rbx, [rsp + 8]; ret > 0x1800b6edd : mov rdi, [rsp + 0x10]; ret > 0x180004a56 : mov ebx, [rsp + 8]; ret > 0x1800b6ede : mov edi, [rsp + 0x10]; ret > 0x1800e6602 : mov rax, [rsp + 0x38]; add rsp, 0x28; ret > 0x180080c63 : mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x1800f6785 : mov eax, [rsp + 0x118]; add rsp, 0x108; ret > 0x1800163c1 : mov rcx, [rsp + 0x30]; mov [rcx], r8b; ret > 0x1800163c2 : mov ecx, [rsp + 0x30]; mov [rcx], r8b; ret > 0x1800077c2 : mov rsi, [rsp + 0x10]; mov rdi, [rsp + 0x18]; ret > 0x1800077c3 : mov esi, [rsp + 0x10]; mov rdi, [rsp + 0x18]; ret > 0x180080c5f : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x180080c60 : mov edx, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x1800bc7d7 : mov rbp, [rsp + 0x10]; mov rdi, [rsp + 0x18]; mov [r9], r8d; ret > 0x1800bc7d8 : mov ebp, [rsp + 0x10]; mov rdi, [rsp + 0x18]; mov [r9], r8d; ret > 0x1800d0d12 : mov r8, [rsp + 0x60]; mov rax, [rcx]; mov rax, [rax + 0x68]; call [rip + 0x111404]; add rsp, 0x38; ret > 0x18004c271 : mov rdx, [rsp + 0x70]; mov [rsp + 0x28], 1; mov [rsp + 0x20], rdx; mov edx, 2; call [rip + 0x195e9a]; add rsp, 0x48; ret