ropshell> use 5fa34090bffaae489c45ba43712a50c5 (download)
name         : dns.exe (x86_64/PE)
base address : 0x100001000
total gadgets: 2880

ropshell> suggest
call
    > 0x10001c35f : call rax
    > 0x10005674d : call rbx
    > 0x100074954 : call rcx
    > 0x1000334e1 : call rdx
    > 0x10007077e : call rsi
jmp
    > 0x100058732 : push rsp; ret
    > 0x100073d1e : jmp rax
    > 0x10006746d : jmp rdi
    > 0x100027d14 : jmp [rax]
    > 0x10006daf9 : jmp [rbx]
load mem
    > 0x10007922c : mov rax, [rcx]; ret
    > 0x10007922d : mov eax, [rcx]; ret
    > 0x10006ad40 : mov eax, [rcx + 4]; ret
    > 0x100074be1 : mov rdx, [rbx]; call rax
    > 0x100074be2 : mov edx, [rbx]; call rax
load reg
    > 0x100040938 : pop rax; ret
    > 0x1000174fa : pop rbx; ret
    > 0x10005afbf : pop rcx; ret
    > 0x100017e6d : pop rsi; ret
    > 0x100017074 : pop rdi; ret
pop pop ret
    > 0x10001a65e : pop r12; ret
    > 0x100019756 : pop r12; pop rdi; ret
    > 0x10003bf9f : pop r12; pop rdi; pop rbp; ret
    > 0x100018f5b : pop r12; pop rdi; pop rsi; pop rbp; ret
    > 0x100018482 : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x1000816c9 : add rsp, 0x10; ret
    > 0x1000816c9 : add rsp, 0x10; ret
    > 0x100017005 : add rsp, 0x28; ret
    > 0x100026e0e : add rsp, 0x38; ret
    > 0x100033432 : add rsp, 0x468; ret
stack pivoting
    > 0x100027b0a : xchg eax, esp; ret
    > 0x10002f85a : mov rsp, r11; pop r12; ret
    > 0x10002f85b : mov esp, ebx; pop r12; ret
    > 0x1000302ab : leave ; ret
write mem
    > 0x10001b776 : add [rax + 0x3b], ecx; ret
    > 0x100079276 : add [rax + 1], edi; ret
    > 0x100079275 : add [r8 + 1], edi; ret
    > 0x10005709c : add [rdi], ecx; xchg eax, ebp; ret
    > 0x100023ae1 : adc [rcx], eax; add [rbx], bh; ret