ropshell> use 437b8a73f8244efe5e49919f24c899b7 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 6584

ropshell> suggest
call
    > 0x18006d1c5 : call rax
    > 0x18003c03c : call rbx
    > 0x1800c26b4 : call rsi
    > 0x18010555d : call rdi
    > 0x180092e46 : call rsp
jmp
    > 0x18000d57e : push rsp; ret
    > 0x18008eb9c : jmp rax
    > 0x1800c8314 : jmp rbx
    > 0x18001c0dd : jmp rcx
    > 0x180037bbd : jmp rdx
load mem
    > 0x18006e520 : movzx eax, [rcx]; ret
    > 0x1800d7b6a : mov eax, [rcx + 0x16b0]; ret
    > 0x18010c3a5 : mov eax, [rdx + 0x38]; ret
    > 0x180047cff : mov eax, [rdi]; add bh, dh; ret
    > 0x180094bd6 : movzx ecx, [rdx]; sub eax, ecx; ret
load reg
    > 0x18000521c : pop rax; ret
    > 0x180001297 : pop rbx; ret
    > 0x180091709 : pop rcx; ret
    > 0x1800f094b : pop rdx; ret
    > 0x18000123e : pop rsi; ret
pop pop ret
    > 0x18008ebb8 : pop r11; ret
    > 0x18008ebb6 : pop r10; pop r11; ret
    > 0x18000b0fb : pop r12; pop rdi; pop rbp; ret
    > 0x1800014a9 : pop r12; pop rdi; pop rsi; pop rbp; ret
    > 0x18000e39d : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x1800a4328 : add rsp, 0x10; ret
    > 0x1800a4328 : add rsp, 0x10; ret
    > 0x1800af1fb : add rsp, 0x238; ret
    > 0x1800083e1 : add rsp, 0x38; ret
    > 0x18007f943 : add rsp, 0x438; ret
stack pivoting
    > 0x180030004 : xchg eax, esp; ret
    > 0x180028549 : mov rsp, r11; pop r14; ret
    > 0x18002854a : mov esp, ebx; pop r14; ret
    > 0x180123fd2 : lea rsp, [rbp + 0x10]; pop rbp; ret
    > 0x1800e8a7d : xchg esp, ebx; lahf ; xor eax, eax; ret
syscall
    > 0x18009eef2 : syscall ; ret
write mem
    > 0x1801017cf : adc [rax], r10; ret
    > 0x1801017d0 : adc [rax], edx; ret
    > 0x18005094f : add [rbx], edi; ret
    > 0x1800a6388 : adc [rdx], eax; ret
    > 0x1800777a8 : add [rdi], ecx; ret