ropshell> use 98207be612b45468b5dfe713fa33b117 (download)
name         : try_me (x86_64/RAW)
base address : 0x0
total gadgets: 8146

ropshell> suggest "load mem"
> 0x0008df06 : mov edi, [rdx]; ret
> 0x0000d0ab : movzx eax, [rdx]; pop rbx; ret
> 0x00072fd0 : mov eax, [rdx + 0x4c]; ret
> 0x00052230 : mov eax, [rcx]; pop rbx; pop rsi; ret
> 0x00019cb0 : movzx ecx, [rax]; movzx eax, [rdx]; sub eax, ecx; ret
> 0x00019ef9 : movzx ecx, [rsi + rcx]; sub eax, ecx; pop rsi; pop rdi; ret
> 0x00025b93 : mov eax, [rbx]; mov [rsp], eax; call rsi
> 0x0004febe : mov eax, [rsi]; add eax, [rcx]; call rax
> 0x000502e6 : mov eax, [rdi]; add eax, [rcx]; call rax
> 0x00046d20 : mov eax, [rbp]; mov [rsp], eax; call rbx
> 0x00054732 : mov eax, [rbx + 0x14]; call [rbx]
> 0x00053dc8 : mov edx, [rbx]; add edx, [rax + 4]; call rdx
> 0x0001da64 : mov eax, [rcx + 3]; mov [rdx + 3], eax; mov eax, edx; ret
> 0x00050208 : mov eax, [rsi + 8]; add eax, [rcx]; call rax
> 0x00046e3d : mov eax, [rdi + 8]; mov [rsp], eax; call rbx
> 0x00019cc0 : movzx ecx, [rax + 1]; movzx eax, [rdx + 1]; sub eax, ecx; ret
> 0x0000c0b4 : mov edx, [rax + 0x94]; mov eax, [rdx + 0x20]; jmp rax
> 0x00028a9e : mov edx, [rsi + 0xc]; mov [rsp], edx; call rax
> 0x00028dd6 : mov edx, [rdi + 0xc]; mov [rsp], edx; call rax
> 0x00002950 : mov eax, [rbp + 0x10]; lea esp, [rbp - 0xc]; pop rbx; pop rsi; pop rdi; pop rbp; ret
> 0x00007e6b : mov esi, [rax + 0x54]; mov [rsp], esi; call [rsi + 0x10]
> 0x00009230 : mov edi, [rbx + 0x54]; mov [rsp], edi; call [rdi + 0x10]
> 0x000085d8 : mov edi, [rsi + 0x54]; mov [rsp], edi; call [rdi + 0x10]
> 0x000557b6 : mov ebp, [rax + 0xc]; mov eax, [rsp + 8]; mov esp, ecx; jmp rdx
> 0x0005472f : mov ecx, [rbx + 0x10]; mov eax, [rbx + 0x14]; call [rbx]
> 0x000502e3 : mov ecx, [rbp + 8]; mov eax, [rdi]; add eax, [rcx]; call rax
> 0x0000c509 : mov edx, [rbx + 0x94]; mov [rsp + 4], eax; mov [rsp], ebx; call [rdx + 0x18]
> 0x000557b3 : mov edi, [rax + 8]; mov ebp, [rax + 0xc]; mov eax, [rsp + 8]; mov esp, ecx; jmp rdx
> 0x0003afe6 : mov edi, [rbp + 8]; mov [rsp + 8], ebx; mov [rsp + 4], ecx; mov [rsp], edi; call rax
> 0x0003d868 : mov edx, [rcx + 0x94]; mov [rsp + 8], edi; mov [rsp + 4], eax; mov [rsp], ecx; call [rdx + 0x1c]
> 0x0004f1f8 : mov ecx, [rdx]; add edx, 8; mov [rax + 0x18c], edx; lea edx, [rdx + rcx*4]; mov [rax + 0x178], ecx; mov [rax + 0x188], edx; ret
> 0x000557ae : mov ebx, [rax]; mov esi, [rax + 4]; mov edi, [rax + 8]; mov ebp, [rax + 0xc]; mov eax, [rsp + 8]; mov esp, ecx; jmp rdx
> 0x00007594 : mov rdx, [rbx + 0x48]; mov [rax + 8], esi; add [rdx + 4], 1; mov eax, [rbx + 0x94]; mov [rsp], ebx; call [rax + 0x30]
> 0x00054725 : mov esi, [rbx]; mov edi, [rbx + 4]; mov [rbx], eax; mov edx, [rbx + 0xc]; mov ecx, [rbx + 0x10]; mov eax, [rbx + 0x14]; call [rbx]