ropshell> use 38f67b2a9daef558ac2b6917196fed60 (download)
name         : mugen.exe (x86_64/RAW)
base address : 0x0
total gadgets: 8559

ropshell> suggest
call
    > 0x00006f54 : call rax
    > 0x00000ca4 : call rbx
    > 0x000078fc : call rcx
    > 0x00006ee8 : call rdx
    > 0x000023d8 : call rsi
jmp
    > 0x0000132e : push rsp; ret
    > 0x0001fbf6 : jmp rax
    > 0x000752eb : jmp rcx
    > 0x0000980d : jmp rdx
    > 0x0005367f : jmp [rax]
load mem
    > 0x0000dbd3 : mov eax, [rcx + 0x20]; ret
    > 0x000165fe : mov eax, [rsi + 4]; pop rdi; ret
    > 0x00006f52 : mov eax, [rsi]; call rax
    > 0x0000980a : mov edx, [rax + 0x64]; jmp rdx
    > 0x0008c4b2 : movsxd r9, [rdx]; push rcx; call rbx
load reg
    > 0x000725ee : pop rax; ret
    > 0x0000100e : pop rbx; ret
    > 0x0000048d : pop rcx; ret
    > 0x00000d09 : pop rsi; ret
    > 0x00000cc5 : pop rdi; ret
pop pop ret
    > 0x000725ee : pop rax; ret
    > 0x0000100d : pop rbp; pop rbx; ret
    > 0x0000048b : pop rbp; pop rbx; pop rcx; ret
    > 0x0004208d : pop rbp; pop rbx; pop rdi; pop rsi; ret
    > 0x0006f64d : pop rdi; pop rbp; pop rbx; pop rsi; pop rcx; ret
stack pivoting
    > 0x0000e5c9 : xchg eax, esp; ret
    > 0x00008f04 : mov esp, ebp; pop rbp; ret
    > 0x000975d4 : push rcx; pop rsp; call rdx
    > 0x0000958f : lea esp, [rcx - 0x3b7cfffd]; or [rbx + 0x595e5fc6], cl; ret
    > 0x0004dbd3 : xchg esp, ebx; add [rax], eax; add [rsi + 0x5d], bl; pop rbx; ret
write mem
    > 0x0001b345 : adc [rbx], edi; ret
    > 0x0005d51e : add [rbx], ebp; ret
    > 0x0006a275 : add [rax + 0x1112c], ecx; ret
    > 0x00094519 : adc [rax + 0x28], ebp; ret
    > 0x00088fca : add [rsi + 0x59], ebx; ret