ropshell> use 74d1ec6d52c4251163882e1c3eabe4c4 (download) name : steam_api64.dll (x86_64/PE) base address : 0x13b401000 total gadgets: 3674
ropshell> suggest "load reg" > 0x13b402743 : pop rax; ret > 0x13b4010c3 : pop rbx; ret > 0x13b403e93 : pop rsi; ret > 0x13b4030aa : pop rdi; ret > 0x13b4063b2 : pop rbp; ret > 0x13b4047a9 : pop rsp; ret > 0x13b4047a8 : pop r12; ret > 0x13b40bfdf : pop r13; ret > 0x13b403e92 : pop r14; ret > 0x13b415b67 : pop r15; ret > 0x13b42acdc : pop rcx; clc ; ret > 0x13b42a3f7 : mov rbx, [rsp + 8]; ret > 0x13b41adc0 : mov rdi, [rsp + 0x20]; ret > 0x13b428e3a : mov r14, [rsp + 0x18]; ret > 0x13b42a3f8 : mov ebx, [rsp + 8]; ret > 0x13b428e3b : mov esi, [rsp + 0x18]; ret > 0x13b41adc1 : mov edi, [rsp + 0x20]; ret > 0x13b427c53 : mov rsi, [rsp + 0x18]; pop rdi; ret > 0x13b429918 : mov eax, [rsp]; add rsp, 8; ret > 0x13b409182 : mov rax, [rsp + 0x30]; add rsp, 0x28; ret > 0x13b409df4 : mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x13b40ef63 : mov rcx, [rsp + 0x40]; call rax > 0x13b40ef64 : mov ecx, [rsp + 0x40]; call rax > 0x13b40471b : mov rdx, [rsp + 0x28]; call [rax + 8] > 0x13b409df0 : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x13b40471c : mov edx, [rsp + 0x28]; call [rax + 8] > 0x13b41adb6 : mov rbp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret > 0x13b41adb7 : mov ebp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret > 0x13b40732f : pop rdx; add al, [rax]; mov [rdi + 0x1a], al; mov [rdi + 0x1b], r12b; mov rax, [rcx]; mov edx, [rip + 0x424ee]; call [rax + 8]