ropshell> use 57ac5701b83e83c59df7e83362f69bcb (download) name : cygwin1.dll (x86_64/PE) base address : 0x180041000 total gadgets: 12614
ropshell> suggest call > 0x180043868 : call rax > 0x180047744 : call rbx > 0x18006095a : call rcx > 0x18005afdb : call rdx > 0x180046513 : call rsi jmp > 0x180085068 : push rsp; ret > 0x18004a3c2 : jmp rax > 0x1800925ea : jmp rbx > 0x18009c21d : jmp rcx > 0x1800435e3 : jmp rdx load mem > 0x1800d87f0 : movzx eax, [rcx]; ret > 0x180213860 : mov rax, [rcx + 0x128]; ret > 0x180077b80 : movsxd rax, [rdx + 0x18]; ret > 0x180213861 : mov eax, [rcx + 0x128]; ret > 0x1800a0dd0 : movzx eax, [rdx + 0x18]; ret load reg > 0x18006ab7d : pop rax; ret > 0x1800411b3 : pop rbx; ret > 0x180076463 : pop rcx; ret > 0x180041c96 : pop rsi; ret > 0x180041b4d : pop rdi; ret pop pop ret > 0x1800413e6 : pop r12; ret > 0x180041351 : pop r12; pop r13; ret > 0x180041c91 : pop r12; pop r13; pop r14; ret > 0x180041b46 : pop r12; pop r13; pop r14; pop r15; ret > 0x180048dfd : pop r12; pop r13; pop r14; pop r15; pop rbp; ret sp lifting > 0x18014d7a8 : add rsp, 0x188; ret > 0x18014d7a8 : add rsp, 0x188; ret > 0x18006461e : add rsp, 0x2038; ret > 0x1800477f6 : add rsp, 0x3228; ret > 0x18004288c : add rsp, 0x48; ret stack pivoting > 0x18005dd83 : xchg eax, esp; ret > 0x1800a78d6 : mov rsp, rbp; pop rbp; ret > 0x1802105c4 : mov rsp, r10; push r11; ret > 0x1802105c5 : mov esp, edx; push r11; ret > 0x1800a78d7 : mov esp, ebp; pop rbp; ret write mem > 0x1801ccc18 : add [rcx], edi; ret > 0x1800f80b0 : add [rcx], ebp; ret > 0x1801cedf1 : add [r9], rdi; ret > 0x1801cd167 : add [r9], edi; ret > 0x18010d90f : add [rax + 0x88], rdx; ret