ropshell> use 13f6e93ae581129e5dbc1d4126de3767 (download) name : libspp.dll (i386/PE) base address : 0x10001000 total gadgets: 37331
ropshell> suggest call > 0x10001067 : call eax > 0x10002134 : call ebx > 0x10142da7 : call ecx > 0x10076a1b : call edx > 0x10009ee4 : call esi jmp > 0x10090ac2 : push esp; ret > 0x1000f5ff : jmp eax > 0x1013abc1 : jmp ecx > 0x100e2537 : jmp edx > 0x1007836d : jmp edi load mem > 0x10007b50 : mov eax, [ecx + 0x100]; ret > 0x10045876 : mov edx, [ecx + 0x1044]; ret > 0x10154116 : mov eax, [esi + 8]; pop esi; ret > 0x100988b4 : mov eax, [ecx]; push 1; call [eax]; ret > 0x1012526e : mov eax, [ebx + 0xdc]; pop edi; pop ebx; ret load reg > 0x100072a2 : pop eax; ret > 0x10006014 : pop ebx; ret > 0x1000875e : pop ecx; ret > 0x100010a6 : pop esi; ret > 0x1000fcc7 : pop edi; ret pop pop ret > 0x100072a2 : pop eax; ret > 0x101582b0 : pop eax; pop ebx; ret > 0x10008787 : pop ebp; pop ebx; pop ecx; ret > 0x10135ccb : pop ebp; pop ebx; pop esi; pop ecx; ret > 0x10159db1 : pop ebp; pop edi; pop esi; pop ebx; pop ecx; ret sp lifting > 0x1008baa0 : add esp, 0x1000; ret > 0x1008baa0 : add esp, 0x1000; ret > 0x10034ebf : add esp, 0x2000; ret > 0x10010208 : add esp, 0x30; ret > 0x1014d973 : add esp, 0x400; ret stack pivoting > 0x101394a9 : xchg eax, esp; ret > 0x100e1d04 : push ecx; pop esp; ret > 0x1005e9f3 : mov esp, ebp; pop ebp; ret > 0x1009f7fe : push eax; pop esp; mov eax, 1; ret 8 > 0x1010d3cf : lea esp, [ebp + 0x5e5f0004]; mov eax, 1; pop ebx; add esp, 0x2640; ret 8 write mem > 0x100110e6 : add [eax], edx; ret > 0x100ef1bd : adc [ebx], edi; ret > 0x1014c632 : add [eax + 1], edi; ret > 0x10063f62 : add [ebx + 0x3b102444], ecx; ret > 0x10004a9d : add [ecx + 0x3a], eax; ret