ropshell> use b3a5e819e3cf9834a6b33c606fc50289 (download)
name         : dbghelp.dll (x86_64/PE)
base address : 0x103001000
total gadgets: 10616

ropshell> suggest "load reg"
> 0x103001276 : pop rax; ret
> 0x103007de8 : pop rbx; ret
> 0x1031038be : pop rcx; ret
> 0x103103f56 : pop rdx; ret
> 0x10300830d : pop rsi; ret
> 0x103007e66 : pop rdi; ret
> 0x1030010db : pop rbp; ret
> 0x103017441 : pop rsp; ret
> 0x103017440 : pop r12; ret
> 0x103010892 : pop r13; ret
> 0x10300830c : pop r14; ret
> 0x10300f5c5 : pop r15; ret
> 0x10309f189 : mov rbx, [rsp + 8]; ret
> 0x1030257d9 : mov rsi, [rsp + 0x10]; ret
> 0x103065513 : mov rdi, [rsp + 0x10]; ret
> 0x10302d92f : mov r14, [rsp + 0x20]; ret
> 0x10309f18a : mov ebx, [rsp + 8]; ret
> 0x1030257da : mov esi, [rsp + 0x10]; ret
> 0x103065514 : mov edi, [rsp + 0x10]; ret
> 0x1030e9fb2 : mov rax, [rsp + 0x30]; add rsp, 0x28; ret
> 0x103126263 : mov eax, [rsp + 0x20]; add rsp, 0x38; ret
> 0x1030f1fda : mov ecx, [rsp + 0x28]; jmp rax
> 0x10308f6d2 : pop r8; add [rax], al; add [rax], al; ret
> 0x10305d961 : pop r9; lea rax, [rip + 0x116]; cmovne r8, rax; mov rax, r8; ret
> 0x1030cdcd2 : mov rbp, [rsp + 0x30]; mov rsi, [rsp + 0x38]; pop r15; pop r14; pop rdi; ret
> 0x1030cdcd3 : mov ebp, [rsp + 0x30]; mov rsi, [rsp + 0x38]; pop r15; pop r14; pop rdi; ret
> 0x1030d9aee : mov r10, [rsp + 0x80]; mov [rsp + 0x20], r10; call [rip + 0x90317]; add rsp, 0x58; ret
> 0x1030d9aef : mov edx, [rsp + 0x80]; mov [rsp + 0x20], r10; call [rip + 0x90317]; add rsp, 0x58; ret