ropshell> use 68db74c69e37c233314eeb620bcbd20f (download)
name         : eko2019.exe (x86_64/RAW)
base address : 0x0
total gadgets: 551
ropshell> suggest
call
    > 0x00000f89 : call rax
    > 0x0000263f : call rbx
    > 0x000024ab : call rcx
    > 0x00005755 : call rsi
    > 0x00005400 : call rbp
jmp
    > 0x00005c1e : jmp rax
    > 0x00005e86 : jmp [rcx]
    > 0x00006d84 : jmp [rsi + 0x66]
load mem
    > 0x000040ea : mov eax, [rcx + 0x1c]; add rsp, 0x28; ret
    > 0x000049b9 : mov rax, [rcx + 0x158];  inc [rax + 0x160]; ret
    > 0x00006a9d : mov rsi, [r11 + 0x18]; mov rsp, r11; pop rdi; ret
    > 0x00004367 : mov rdi, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
    > 0x00006a9e : mov esi, [rbx + 0x18]; mov rsp, r11; pop rdi; ret
load reg
    > 0x00000567 : pop rax; ret
    > 0x00000af9 : pop rbx; ret
    > 0x00006669 : pop rsi; ret
    > 0x00000d91 : pop rdi; ret
    > 0x00001e5e : pop rbp; ret
pop pop ret
    > 0x000013d6 : pop r12; ret
    > 0x00006a0a : pop r12; pop rbp; ret
    > 0x000021ae : pop r12; pop rdi; pop rbp; ret
    > 0x00001e5a : pop r12; pop rdi; pop rsi; pop rbp; ret
    > 0x00005805 : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x00007b89 : add rsp, 0x10; ret
    > 0x00007b89 : add rsp, 0x10; ret
    > 0x000005d5 : add rsp, 0x28; ret
    > 0x00002271 : add rsp, 0x38; ret
    > 0x00007db6 : add rsp, 0x48; ret
stack pivoting
    > 0x00005f49 : xchg eax, esp; ret
    > 0x0000436b : mov rsp, r11; pop rbp; ret
    > 0x0000436c : mov esp, ebx; pop rbp; ret
    > 0x00006a00 : lea rsp, [rbp + 0x10]; pop r15; pop r14; pop r13; pop r12; pop rbp; ret
    > 0x00006a01 : lea esp, [rbp + 0x10]; pop r15; pop r14; pop r13; pop r12; pop rbp; ret
write mem
    > 0x00000be3 : adc [rax + 0xf], ecx; ret
    > 0x0000229b : adc [rdi + 6], esi; mov eax, 0xd; ret