ropshell> use 759fe22d089a9a6aed263afe9cc08e2b (download)
name         : chrome_elf.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 6099

ropshell> suggest "write mem"
> 0x180003984 : add [rax], ecx; ret
> 0x1800406a8 : add [rax + 3], edi; ret
> 0x1800097d5 : adc [rdx + 8], eax; ret
> 0x18004360f : adc [rcx], eax; mov rax, r11; ret
> 0x1800136cb : adc [rdi], ecx; mov dh, 0xc2; ret
> 0x180021d9f : add [r8], rax; add [rax - 0x77], cl; ret
> 0x180043d18 : add [rbx + 0x3a8a0], eax; add ch, bh; ret
> 0x180058d4d : add [rcx + 0xf], eax; xchg eax, esi; ret
> 0x18004df7b : adc [rdi + 6], esi; mov eax, 0xd; ret
> 0x180042ffa : add [r8], eax; mov al, 1; add rsp, 0x28; ret
> 0x18004360c : adc [rbx], ecx; movups xmm[rcx], xmm0; mov rax, r11; ret
> 0x18002d32b : add [rbp + 4], esi; jmp [rcx + 0x10]
> 0x180028a22 : add [rdx + 1], edi; call [rax + 0x28]
> 0x1800447e3 : add [rax], r8; mov rax, [rsp + 0x30]; mov rax, [rax]; add rsp, 0x28; ret
> 0x18003de75 : add [rax + 8], rdx; mov rax, [rcx + 8];  add [rax + 0x10], r8d; ret
> 0x18003de76 : add [rax + 8], edx; mov rax, [rcx + 8];  add [rax + 0x10], r8d; ret
> 0x18003c8ab : add [rax], ebp; mov rax, [rbx]; mov rcx, rbx; call [rax + 0x10]
> 0x180028aff : add [rcx], esi; sar bh, cl; push rax; sub [rcx - 0x3b7cb710], cl; and [rbx + 0x5f], bl; pop rsi; ret
> 0x18005c1f3 : add [rdx], edi; add al, [rax]; mov [rip + 0x2d6c2], rax; mov al, 1; add rsp, 0x28; ret
> 0x18003b702 : add [rsi + 0x20], ebp; mov rax, [rbx]; mov rcx, rbx; call [rax + 0x10]
> 0x180018c07 : add [rcx + 7], edi; movq xmm0, rcx; pslldq xmm0, 8; movdqu xmm[rdx + 0x10], xmm0; mov [rdx], 0; ret
> 0x180042744 : add [rcx + 0x47894101], esi; mov r8d, [rbx + rdx*8 + 0xc]; mov rdx, r13; add r8, r12; call r8
> 0x18003dfad : add [rdx + 0x10], ecx; mov rsi, [rax]; lea rdx, [rsp + 0x28]; mov rcx, rax; call [rsi + 0x38]
> 0x1800099d4 : add [rax], ebx; add dh, [rax + rdx + 0x48]; mov ecx, [rsi + rax + 0x48]; mov rax, [rcx]; call [rax + 0x68]
> 0x18003de0f : add [rcx + 8], rdx; mov rcx, [rsi + 8];  add [rcx + 0x10], r8d; mov r8, [rax]; lea rdx, [rsp + 0x20]; mov rcx, rax; call [r8 + 0x38]
> 0x18003de10 : add [rcx + 8], edx; mov rcx, [rsi + 8];  add [rcx + 0x10], r8d; mov r8, [rax]; lea rdx, [rsp + 0x20]; mov rcx, rax; call [r8 + 0x38]
> 0x18003dfa4 : add [rsi + 8], rdx; mov rdx, [rdi + 8];  add [rdx + 0x10], ecx; mov rsi, [rax]; lea rdx, [rsp + 0x28]; mov rcx, rax; call [rsi + 0x38]
> 0x18003dfa5 : add [rsi + 8], edx; mov rdx, [rdi + 8];  add [rdx + 0x10], ecx; mov rsi, [rax]; lea rdx, [rsp + 0x28]; mov rcx, rax; call [rsi + 0x38]