ropshell> use a1c79d11f2b070b114fee3fe6ff7b8fd (download)
name         : text (x86_64/RAW)
base address : 0x0
total gadgets: 27088

ropshell> suggest "load mem"
> 0x0008cef5 : mov rax, [rdi]; ret
> 0x002e5fe2 : mov r15, [r14]; ret
> 0x0008cef6 : mov eax, [rdi]; ret
> 0x002e5fe3 : mov edi, [rsi]; ret
> 0x002c7508 : mov rax, [rbx]; pop rbx; ret
> 0x002c7509 : mov eax, [rbx]; pop rbx; ret
> 0x002ded86 : mov rax, [rcx + 0x20]; ret
> 0x0029beb8 : mov rax, [rdx + 0x78]; ret
> 0x0008cf65 : mov rax, [rsi + 0x58]; ret
> 0x000ad08e : mov rax, [rdi + 0x10]; ret
> 0x002ded87 : mov eax, [rcx + 0x20]; ret
> 0x000b345d : mov eax, [rdx + 0x18]; ret
> 0x0008cf66 : mov eax, [rsi + 0x58]; ret
> 0x000ad08f : mov eax, [rdi + 0x10]; ret
> 0x0025caca : mov edi, [rdx]; jmp rax
> 0x000939af : mov rax, [rbx + 0x10]; pop rbx; ret
> 0x00165cc0 : mov rax, [edi + 0x100]; pop rbx; ret
> 0x000939b0 : mov eax, [rbx + 0x10]; pop rbx; ret
> 0x00327d48 : mov rsi, [rbp]; call rax
> 0x00326346 : mov rsi, [r12]; call rax
> 0x0008fdac : mov rsi, [r14]; call rbp
> 0x001dd342 : mov rdi, [rbx]; call r12
> 0x0025741b : mov rdi, [rdx]; call rax
> 0x002b49a9 : mov rdi, [rsi]; call rdx
> 0x0028d589 : mov rdi, [rbp]; call rax
> 0x0009ce48 : mov eax, [rsi]; sub eax, [rdi]; ret
> 0x0029ad51 : mov ebx, [rsi]; salc ; dec [rax - 0x77]; ret
> 0x00327d49 : mov esi, [rbp]; call rax
> 0x001dd343 : mov edi, [rbx]; call r12
> 0x0028d58a : mov edi, [rbp]; call rax
> 0x00245d29 : movzx edi, [r12]; call r13
> 0x0009ad34 : mov rax, [r13 + 0x60]; pop r13; pop r14; ret
> 0x002e6455 : movsxd rax, [r15 + 0xc]; add r15, rax; ret
> 0x00285c20 : mov rcx, [rdi + 8]; jmp rcx
> 0x0009ad35 : mov eax, [rbp + 0x60]; pop r13; pop r14; ret
> 0x00285c21 : mov ecx, [rdi + 8]; jmp rcx
> 0x0005bb07 : movzx edx, [rcx + rdx]; add rax, rdx; ret
> 0x002e5e90 : mov rax, [r14]; lea r15, [rax + 0x20]; ret
> 0x002c3d35 : mov rcx, [rax]; xor eax, eax; jmp rcx
> 0x00288986 : mov rdx, [rax]; mov [rdi + 0x100], rdx; ret
> 0x00093c46 : mov rdx, [rbx]; mov [rax], rdx; pop rbx; ret
> 0x0032dd36 : mov r15, [rax]; mov r14, rax; add rsp, 8; ret
> 0x002c3d36 : mov ecx, [rax]; xor eax, eax; jmp rcx
> 0x00288987 : mov edx, [rax]; mov [rdi + 0x100], rdx; ret
> 0x00093c47 : mov edx, [rbx]; mov [rax], rdx; pop rbx; ret
> 0x0032dd37 : mov edi, [rax]; mov r14, rax; add rsp, 8; ret
> 0x002b348b : mov rax, [rbp + 0x58]; pop rbx; pop rbp; pop r12; ret
> 0x0024770f : mov rdi, [rbx + 0x10]; call rcx
> 0x0008c991 : mov rdi, [rcx + 0x40]; call r8
> 0x000e06ca : mov rdi, [rbp + 0x10]; call rax
> 0x00080809 : mov rdi, [r11 + 0x50]; call rax
> 0x002ae7a0 : mov rdi, [r13 + 0x68]; call rax
> 0x000b4ade : mov r9, [rbx + 0x230]; call r10
> 0x000b4adf : mov ecx, [rbx + 0x230]; call r10
> 0x002aa9e7 : mov esi, [rax + 0x98]; call rdx
> 0x002b075b : mov esi, [rbx + 0x98]; call rax
> 0x001d1961 : mov esi, [rcx + 0x1f0fffe2]; add [rax - 1], bh; ret
> 0x00247710 : mov edi, [rbx + 0x10]; call rcx
> 0x0008c992 : mov edi, [rcx + 0x40]; call r8
> 0x000e06cb : mov edi, [rbp + 0x10]; call rax
> 0x002ae7c4 : movzx edi, [r13 + 0x8c]; call rax
> 0x002e5e3c : mov edi, [r15 + 0x14]; call rax
> 0x002d0e81 : mov ebp, [rdi + 0x1f0fffd2]; add [rax - 0x7d], cl; ret
> 0x00330be8 : mov rax, [rdx]; mov rax, [rax]; add rsp, 8; ret
> 0x0015f532 : mov rax, [r12]; call [rax + 0x20]
> 0x0005ad63 : mov rbx, [rdi]; call [rbp]
> 0x00095a0b : mov rdx, [rdi]; call [rdx + 0x20]
> 0x001a7f4c : mov rsi, [rbx]; call [rax + 8]
> 0x001274b4 : mov rdi, [rax]; xor eax, eax; call rbp
> 0x0029ee76 : mov rbp, [rbx]; mov rdi, r12; call r14
> 0x0009741e : mov r8, [rdi]; call [r8 + 0x10]
> 0x0026f958 : mov r8, [r9]; mov [rdx], eax; xor eax, eax; ret
> 0x002c25ef : mov r9, [rax]; call [r12]
> 0x0026f959 : mov eax, [rcx]; mov [rdx], eax; xor eax, eax; ret
> 0x00330be9 : mov eax, [rdx]; mov rax, [rax]; add rsp, 8; ret
> 0x0005ad64 : mov ebx, [rdi]; call [rbp]
> 0x00095a0c : mov edx, [rdi]; call [rdx + 0x20]
> 0x001a7f4d : mov esi, [rbx]; call [rax + 8]
> 0x0008ff03 : mov esi, [r12]; mov rdi, rbx; call r13
> 0x0029ee77 : mov ebp, [rbx]; mov rdi, r12; call r14
> 0x002895ee : mov rdx, [rdi + 0x170]; mov rdi, rax; jmp rdx
> 0x0008adb6 : movzx ecx, [rdx + rax]; xor eax, eax; sub eax, ecx; ret
> 0x002895ef : mov edx, [rdi + 0x170]; mov rdi, rax; jmp rdx
> 0x0003cb75 : movzx edx, [r10 + 3]; mov [r9 + 0xc], edx; ret
> 0x002c57e0 : mov rax, [rsi]; cmp [rdi], rax; sete al; movzx eax, al; ret
> 0x0005ad8f : mov rax, [rbp]; mov rdi, r12; pop rbp; pop r12; jmp rax
> 0x001d9b53 : mov rdx, [rsi]; mov [rdi], rdx; mov [rsi], rax; ret
> 0x0005ad90 : mov eax, [rbp]; mov rdi, r12; pop rbp; pop r12; jmp rax
> 0x001d9b54 : mov edx, [rsi]; mov [rdi], rdx; mov [rsi], rax; ret
> 0x002745d8 : mov rcx, [rdx + 0x10]; add rdx, 0x18; call r9
> 0x0028ac37 : mov rdx, [rbx + 0x40]; mov [rax + 0x188], rdx; pop rbx; ret
> 0x001a804d : mov rsi, [rbx + 0x10]; call [r8 + 0x20]
> 0x0025f29b : mov rsi, [rdi + 0x10]; add rdi, 0x18; call rax
> 0x00269a43 : mov rsi, [rbp + 0x18]; call [rax]
> 0x002a8884 : mov rdi, [rax + rbx]; sub rbx, 8; call r12
> 0x000c5d3d : mov rdi, [r15 + 0x38]; call [r15 + 0x30]
> 0x002b4839 : mov rbp, [rsi + 8]; pop rbx; mov rax, rbp; pop rbp; pop r12; ret
> 0x002c3119 : mov r8, [rax + 0x20]; call [rax + 8]
> 0x002a205b : mov edx, [rax + 0x1c]; xor eax, eax; test edx, edx; setne al; ret
> 0x0028ac38 : mov edx, [rbx + 0x40]; mov [rax + 0x188], rdx; pop rbx; ret
> 0x0032dcd1 : movzx edx, [r15 + 0x1c]; call [rax + rdx*8]
> 0x0025f29c : mov esi, [rdi + 0x10]; add rdi, 0x18; call rax
> 0x00269a44 : mov esi, [rbp + 0x18]; call [rax]
> 0x001efd40 : mov esi, [r15 + 0x98]; mov edi, ebp; call rax
> 0x002a8885 : mov edi, [rax + rbx]; sub rbx, 8; call r12
> 0x0026b352 : mov ebp, [rax + 0x1000000]; mov rax, rbx; pop rbx; pop rbp; pop r12; ret
> 0x002b483a : mov ebp, [rsi + 8]; pop rbx; mov rax, rbp; pop rbp; pop r12; ret
> 0x002c3a72 : mov rax, [rcx]; mov [rax + 0x38], rbx; xor eax, eax; pop rbx; ret
> 0x00000434 : mov rax, [r13]; mov rdi, r13; call [rax + 0x60]
> 0x0009468b : mov r9, [r8]; mov rdi, r8; call [r9 + 0x18]
> 0x00227470 : mov rdx, [rax + 0x10]; mov [rax + rdx + 0x18], 0; pop rbx; ret
> 0x002e5ebc : mov rdx, [r14 + rdx]; mov [rax + 0x1a8], edx; add r15, 0x20; ret
> 0x002f46dd : movsxd rdx, [r15 + 0xc]; add rsp, 8; lea r15, [r15 + rdx]; ret
> 0x002e5ebd : mov edx, [rsi + rdx]; mov [rax + 0x1a8], edx; add r15, 0x20; ret
> 0x0008bf37 : mov rsi, [rax]; xor edx, edx; mov rax, [rip + 0x9c3abd]; jmp rax
> 0x002e5f3f : mov r15, [rdi]; nop [rax + rax]; call [r15]
> 0x0008bf38 : mov esi, [rax]; xor edx, edx; mov rax, [rip + 0x9c3abd]; jmp rax
> 0x002d37eb : mov rax, [r12 + 0x48]; mov rdi, r12; call [rax + 0x10]
> 0x001b4708 : mov rax, [r14 + 0x48]; mov rdi, r14; call [rax + 0x20]
> 0x00162aa5 : mov rdx, [rsi + 0x10]; add rsi, 0x18; call [rax + 0x18]
> 0x000c4d42 : mov rsi, [r12 + 0x120]; mov rdi, rax; call [rax + 0x30]
> 0x002a9ca8 : mov rsi, [r13 + 0x10]; lea rdi, [r13 + 0x18]; call rbx
> 0x002f9421 : movsxd rsi, [r15 + 0x10]; mov rdi, rbp; add rsi, r14; call rax
> 0x00247ca3 : mov rdi, [r12 + 0x10]; mov edx, eax; mov rsi, rbx; call rbp
> 0x002fcea9 : movsxd rbp, [r15 + 0x10]; mov rdi, r13; add rbp, r14; call r12
> 0x002c3400 : mov r8, [rbx + 0x20]; mov rsi, r12; mov rdi, rbx; call rax
> 0x002fd0b6 : movsxd r12, [r15 + 0x10]; mov rdi, r13; add r12, r14; call rdx
> 0x0009e3d1 : movzx ebp, [rbx + 0x10]; mov rdi, rbp; call [rax + 8]
> 0x001655af : mov rcx, [rbx]; movsxd rdx, eax; mov [rcx + rdx], 0; pop rbx; pop rbp; pop r12; ret
> 0x000ecd90 : mov rdx, [r8]; mov rdi, [rbx + 0x120]; mov rsi, rbx; call r9
> 0x001655b0 : mov ecx, [rbx]; movsxd rdx, eax; mov [rcx + rdx], 0; pop rbx; pop rbp; pop r12; ret
> 0x00276860 : movzx ecx, [rsi]; movsxd rcx, [r13 + rcx*4]; add rcx, r13; jmp rcx
> 0x0008d10a : mov ecx, [rbp]; mov rsi, r14; mov rdi, r13; call [r13 + 0x40]
> 0x0027685f : movzx ecx, [r14]; movsxd rcx, [r13 + rcx*4]; add rcx, r13; jmp rcx
> 0x0015271e : mov r9, [rdi + 0x8408b00]; mov [rbx + 8], 4; mov [rbx], rax; pop rbx; ret
> 0x0003c908 : movzx eax, [r10 + 1]; mov [r9 + 0xc], eax; lea rax, [r10 + 2]; ret
> 0x001a8046 : mov rcx, [rbx + 0x88]; mov rsi, [rbx + 0x10]; call [r8 + 0x20]
> 0x00275de4 : mov rdx, [rbp + 0x80]; mov rcx, rbx; mov rsi, r14; mov rdi, r13; call rax
> 0x0025f65f : mov rsi, [rax + 0x10]; lea rdi, [rax + 0x18]; call [rbx]
> 0x000cfe04 : mov rsi, [rdx + 8]; mov edx, [rsp + 0x14]; call [rax + 0x18]
> 0x002a9782 : mov rsi, [r14 + 0x10]; lea rdi, [r14 + 0x18]; call [rbp]
> 0x0009c518 : mov rdi, [rsi + 0x10]; mov [rsp + 8], rsi; call [rsi + 8]
> 0x000af08a : mov r8, [r13 + 0x10]; mov rdi, [rbx + 0x10]; call [rbx + 0x18]
> 0x00304df1 : movsxd r8, [r15 + 0x10]; xor ecx, ecx; mov edx, 3; add r8, r14; call rax
> 0x001150d2 : mov r15, [rbx + 0x18]; mov rsi, rbp; mov rdi, r14; call [rax]
> 0x001a8048 : mov ecx, [rax + 0x48000000]; mov esi, [rbx + 0x10]; call [r8 + 0x20]
> 0x00275de5 : mov edx, [rbp + 0x80]; mov rcx, rbx; mov rsi, r14; mov rdi, r13; call rax
> 0x000cfe05 : mov esi, [rdx + 8]; mov edx, [rsp + 0x14]; call [rax + 0x18]
> 0x0009c519 : mov edi, [rsi + 0x10]; mov [rsp + 8], rsi; call [rsi + 8]
> 0x00264911 : mov rax, [r15]; lea rsi, [rdi + rcx]; mov rdi, r15; call [rax + 8]
> 0x002e6343 : mov rcx, [rdx]; mov edx, [rdx + 8]; mov [rax], rcx; mov [rax + 8], edx; ret
> 0x001edde4 : mov r13, [rbx]; mov rdi, rbp; mov rax, [rax + 0x18]; call [rax + 0x78]
> 0x002e6344 : mov ecx, [rdx]; mov edx, [rdx + 8]; mov [rax], rcx; mov [rax + 8], edx; ret
> 0x00268322 : mov rdx, [rbp]; mov edx, [rdx + 0xac]; mov [rbx + 0xac], edx; add rsp, 8; pop rbx; pop rbp; ret
> 0x00268323 : mov edx, [rbp]; mov edx, [rdx + 0xac]; mov [rbx + 0xac], edx; add rsp, 8; pop rbx; pop rbp; ret
> 0x0008bf33 : mov rdi, [rdx + 0x40]; mov rsi, [rax]; xor edx, edx; mov rax, [rip + 0x9c3abd]; jmp rax
> 0x00258818 : mov rdi, [r14 + 0x30]; mov rsi, [rsp + 0xf8]; mov rax, [rsp + 0x40]; call rax
> 0x00245fc7 : mov r14, [rbx + 0x10]; lea rax, [r14 + 1]; mov [rbx + 0x10], rax; call r12
> 0x0028e5ba : mov edx, [r12 + 0x12c]; mov [rax + 0xc], ebp; mov [rax + 8], edx; pop rbx; pop rbp; pop r12; ret
> 0x002ae7b6 : mov esi, [r13 + 0x98]; mov [rbx + 0x3c0], r13; movzx edi, [r13 + 0x8c]; call rax
> 0x0008bf34 : mov edi, [rdx + 0x40]; mov rsi, [rax]; xor edx, edx; mov rax, [rip + 0x9c3abd]; jmp rax
> 0x002e8433 : mov rsi, [rcx]; mov ecx, [rcx + 8]; mov [rax], rsi; mov [rax + 8], ecx; add rsp, 8; ret
> 0x002e8434 : mov esi, [rcx]; mov ecx, [rcx + 8]; mov [rax], rsi; mov [rax + 8], ecx; add rsp, 8; ret
> 0x002f3e4f : movsxd rcx, [r15 + 0x10]; mov [r14 + rcx], rax; mov rax, [r14]; pop rbx; lea r15, [rax + 0x20]; ret
> 0x00162b80 : mov ecx, [rsi + 0x48]; lea r8, [r13 + 0x18]; mov rax, [rdi]; call [rax + 0x18]
> 0x001edd90 : mov r13, [rax]; mov rax, [rbp]; mov rdi, rbp; mov rax, [rax + 0x18]; call [rax + 0x78]
> 0x001edd91 : mov ebp, [rax]; mov rax, [rbp]; mov rdi, rbp; mov rax, [rax + 0x18]; call [rax + 0x78]
> 0x00185258 : mov rbx, [rsi + 8]; mov [rsp + 0x18], rax; mov rax, [rdi + 0x48]; call [rax + 0x10]
> 0x00304d89 : mov rcx, [r14 + 8]; mov [rcx + rdx + 8], 1; mov rax, [r14]; lea r15, [rax + 0x20]; pop rax; ret
> 0x0020ff7d : mov ebx, [rax + 0x48000002]; mov [rbx + 0x2a0], esi; mov [rbx + 0x2a8], rdx; mov [rbx + 0x2b0], rax; pop rbx; ret
> 0x00185259 : mov ebx, [rsi + 8]; mov [rsp + 0x18], rax; mov rax, [rdi + 0x48]; call [rax + 0x10]
> 0x0032463c : mov ecx, [rbp + 0xc]; mov edx, 2; mov rsi, r13; add rcx, [r14 + 0x48]; mov rdi, rbp; call rax
> 0x0032463b : mov ecx, [r13 + 0xc]; mov edx, 2; mov rsi, r13; add rcx, [r14 + 0x48]; mov rdi, rbp; call rax
> 0x00168095 : mov edx, [r13 + 0x114]; lea rax, [rip + 0x5a2291]; movsxd rdx, [rax + rdx*4]; add rax, rdx; jmp rax
> 0x002d90d5 : movzx edx, [r14 + 2]; lea rax, [rip + 0x473a27]; movsxd rdx, [rax + rdx*4]; add rax, rdx; jmp rax
> 0x00066ae9 : movzx esi, [r12 + 1]; lea rdi, [rip + 0x393fda]; movsxd rsi, [rdi + rsi*4]; add rsi, rdi; jmp rsi
> 0x001cc37e : mov rbp, [rdi]; mov [rsi], 1; mov rax, [rdi]; mov rax, [rax + 0x18]; call [rax + 0x78]
> 0x0029e7a3 : mov r12, [rdi]; mov r14, [rip + 0x7acd73]; lea rdi, [rip + 0x4a9a2d]; mov r15, rsp; call [r14]
> 0x001cc37f : mov ebp, [rdi]; mov [rsi], 1; mov rax, [rdi]; mov rax, [rax + 0x18]; call [rax + 0x78]
> 0x002c310e : mov rcx, [rax + 0x18]; mov rdi, rax; mov rsi, [rax + 0x30]; mov r8, [rax + 0x20]; call [rax + 8]
> 0x0027563c : mov rcx, [rbp + 0x88]; mov rdx, [rbp + 0x80]; lea rsi, [rbp + 0x98]; lea rdi, [rbp + 0x90]; call rax
> 0x000e071b : mov rdx, [r12 + 0xc0]; add ebx, 1; mov rsi, [rdx + rbp]; mov rdi, rax; add rbp, 8; call [rax + 0x60]
> 0x002b5008 : mov r8, [rsi + 0x10]; mov [rdi + 0x10], r8; mov [rsi], rcx; mov [rsi + 8], edx; mov [rsi + 0x10], rax; ret
> 0x00138168 : movzx ecx, [r15 + 9]; lea rax, [rip + 0x5bdf58]; and ecx, 7; movsxd rcx, [rax + rcx*4]; add rax, rcx; jmp rax
> 0x000c5036 : mov rbx, [r12]; xor edx, edx; lea rcx, [rsp + 8]; mov rsi, [r12 + 0xd8]; mov rdi, rbx; call [rbx + 0x38]
> 0x00269440 : mov r12, [rax]; mov edx, [rsp + 0x1c]; mov rsi, [rsp + 0x10]; mov rdi, [rsp + 8]; call [r12]
> 0x000e7bc2 : mov eax, [r13 + 0xc]; mov rsi, [rsp + 0x30]; mov rdi, [rbx]; mov [rsp + 0x130], eax; call [r13 + 0x10]
> 0x002bae5b : mov rdx, [r13]; mov rdi, rbp; mov [rsp], rdx; mov [rsp + 8], eax; mov [r13 + 8], 0; call [rbx + 0x30]
> 0x002b4fd6 : mov r8, [rsi]; mov ecx, [rsi + 8]; mov [rdi], r8; mov [rdi + 8], ecx; mov [rsi], rdx; mov [rsi + 8], eax; ret
> 0x002e676e : movsxd rbx, [r15 + 0x10]; mov esi, [r15 + 0xc]; xor edx, edx; add rsi, [r14 + 0x50]; add rbx, r14; mov rcx, rbx; call rax
> 0x00185254 : mov r13, [rsi + 0x10]; mov rbx, [rsi + 8]; mov [rsp + 0x18], rax; mov rax, [rdi + 0x48]; call [rax + 0x10]
> 0x0000b80a : mov ecx, [r11 + 0xc]; mov rsi, r11; mov [rsp + 0x18], r11; add rcx, [r14 + 0x48]; mov edx, 2; mov rdi, r13; call rax
> 0x000d19aa : mov rdi, [r10 + 0x48]; and eax, 1; mov [rsp + 0x20], r10; mov [rsp + 0x18], eax; mov rax, [rdi]; call [rax + 0x60]
> 0x000c4178 : mov rdi, [r15]; mov rax, [rbx]; mov rsi, r13; mov edx, [rbp + 0xbc]; lea rcx, [rdi + 4]; mov rdi, rbx; call [rax + 0x10]
> 0x002599b3 : mov rcx, [rsi + 0xf0]; mov [rsp + 0x140], rdx; lea rdx, [rsp + 0xd8]; mov rsi, [rsp + 8]; mov [rsp + 0x120], rcx; call rax
> 0x000d1977 : mov rdx, [r10 + 0x48]; mov [rsp + 0x28], r10; mov [rsp + 0x6c], 0; lea r8, [rsp + 0x6c]; mov rdi, rax; call [rax + 0x28]
> 0x002b4fb4 : mov r9, [rsi + 0x18]; mov [rdi + 0x18], r9; mov [rsi], r8; mov [rsi + 8], ecx; mov [rsi + 0x10], rdx; mov [rsi + 0x18], rax; ret
> 0x002b95dc : mov rdx, [r12]; lea rdi, [rsp + 0x20]; mov [rsp + 0x28], eax; mov [rsp + 0x20], rdx; mov [r12 + 8], 0; call [r14 + 0x30]
> 0x002745c2 : mov rdx, [r14]; lea rsi, [rsp + 0x38]; lea rdi, [rsp + 0x40]; mov [rsp + 0x38], 0; mov rcx, [rdx + 0x10]; add rdx, 0x18; call r9
> 0x0023b4f1 : mov r9, [r15]; mov r8, r13; mov rcx, [rsp + 8]; mov rdx, [rsp + 0x18]; mov rsi, [rsp + 0x10]; mov rdi, r9; call [r9]
> 0x0023b4f2 : mov ecx, [rdi]; mov r8, r13; mov rcx, [rsp + 8]; mov rdx, [rsp + 0x18]; mov rsi, [rsp + 0x10]; mov rdi, r9; call [r9]
> 0x002bb09c : mov eax, [r15 + r12]; mov rdi, [rsp + 8]; mov [rsp + 0x10], rdx; mov [rsp + 0x18], eax; mov [r14], 0; call [rbx + 0x30]
> 0x0015ca2e : movzx ebp, [rcx]; mov rax, [rbx]; lea rcx, [rsp + 0x28]; lea rdx, [rsp + 0x20]; lea r8, [rsp + 0x1c]; mov rdi, rbx; call [rax + 0x20]
> 0x00154680 : mov rax, [r11]; mov [rsp + 0x28], rcx; mov rdi, r11; mov [rsp + 0x20], rdx; mov [rsp + 0x18], r11; mov rax, [rax + 0x18]; call [rax + 0x78]
> 0x000c4519 : mov r14, [rdi]; mov rdi, [rdi + 0x50]; mov [rsp + 0x44], 0; mov [rsp + 0x48], 1; lea rsi, [rsp + 0x50]; mov rax, [rdi]; call [rax + 0x30]
> 0x000c451a : mov esi, [rdi]; mov rdi, [rdi + 0x50]; mov [rsp + 0x44], 0; mov [rsp + 0x48], 1; lea rsi, [rsp + 0x50]; mov rax, [rdi]; call [rax + 0x30]
> 0x002b95d7 : mov eax, [r12 + 8]; mov rdx, [r12]; lea rdi, [rsp + 0x20]; mov [rsp + 0x28], eax; mov [rsp + 0x20], rdx; mov [r12 + 8], 0; call [r14 + 0x30]