ropshell> use 6e572f16276e144e5fe337ecbb804908 (download) name : comctl32.dll (x86_64/PE) base address : 0x180001000 total gadgets: 2330
ropshell> suggest "load reg" > 0x180004657 : pop rax; ret > 0x1800012ad : pop rbx; ret > 0x18000284c : pop rsi; ret > 0x180001d2e : pop rdi; ret > 0x180001c55 : pop rbp; ret > 0x180002d97 : pop rsp; ret > 0x180002d96 : pop r12; ret > 0x1800098bb : pop r13; ret > 0x18000284b : pop r14; ret > 0x180016042 : pop r15; ret > 0x18008ab56 : pop rcx; push [rbp - 0x10]; ret > 0x180007656 : mov rbx, [rsp + 8]; ret > 0x180021f43 : mov rsi, [rsp + 0x10]; ret > 0x180028d86 : mov rdi, [rsp + 0x10]; ret > 0x180063478 : mov r14, [rsp + 0x20]; ret > 0x180007657 : mov ebx, [rsp + 8]; ret > 0x180021f44 : mov esi, [rsp + 0x10]; ret > 0x180028d87 : mov edi, [rsp + 0x10]; ret > 0x180070d6a : mov eax, [rsp]; add rsp, 0x18; ret > 0x180078333 : mov rax, [rsp + 0x40]; add rsp, 0x28; ret > 0x18008aaa3 : mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x18004e41e : mov edx, [rsp + 0x38]; mov eax, edx; add rsp, 0x28; ret > 0x1800583ee : pop rdx; add eax, [rax]; nop [rax + rax]; add rsp, 0x28; ret > 0x180005f4e : mov rcx, [rsp + 0x28]; mov eax, 1; mov [rcx], r9; ret > 0x18008aa9f : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x180005f4f : mov ecx, [rsp + 0x28]; mov eax, 1; mov [rcx], r9; ret > 0x18007e2d0 : mov rbp, [rsp + 0x18]; mov rsi, [rsp + 0x20]; mov rdi, [rsp + 0x28]; pop r15; ret > 0x18007e2d1 : mov ebp, [rsp + 0x18]; mov rsi, [rsp + 0x20]; mov rdi, [rsp + 0x28]; pop r15; ret