ropshell> use ba0315f1ac992eee669f4c0a2e59ae4f (download)
name         : Windows.AI.MachineLearning.dll (i386/PE)
base address : 0x10001000
total gadgets: 23068

ropshell> suggest
call
    > 0x1000780a : call eax
    > 0x100077be : call ebx
    > 0x100a0aff : call ecx
    > 0x100459a8 : call edx
    > 0x10001072 : call esi
jmp
    > 0x10118bdd : push esp; ret
    > 0x100812b2 : jmp eax
    > 0x101a48a8 : jmp ebx
    > 0x1003c828 : jmp ecx
    > 0x10153071 : jmp edx
load mem
    > 0x1000d8c9 : mov eax, [ecx]; ret
    > 0x100cae27 : movzx eax, [edx]; ret
    > 0x100933d4 : mov eax, [esi]; pop esi; ret
    > 0x1005dc4e : mov eax, [ecx + 0x10]; ret
    > 0x100ba1fb : mov ebx, [eax + eax]; ret
load reg
    > 0x10007d14 : pop eax; ret
    > 0x1000a612 : pop ebx; ret
    > 0x1000221a : pop ecx; ret
    > 0x10193b78 : pop edx; ret
    > 0x100064eb : pop esi; ret
pop pop ret
    > 0x10007d14 : pop eax; ret
    > 0x1006d8ac : pop eax; pop ebp; ret
    > 0x1006ddf9 : pop eax; pop esi; pop ebp; ret
    > 0x1006f8de : pop eax; pop edi; pop ebx; pop esi; ret
    > 0x1000749d : pop eax; pop ebx; pop edi; pop esi; pop ebp; ret
sp lifting
    > 0x1027ea7d : add esp, 0x18; ret
    > 0x1027ea7d : add esp, 0x18; ret
stack pivoting
    > 0x10017339 : xchg eax, esp; ret
    > 0x100a6473 : push edx; pop esp; ret
    > 0x1003960a : mov esp, ebx; pop ebx; ret
    > 0x10006842 : mov esp, ebp; pop ebp; ret
    > 0x1022f63b : lea esp, [eax - 0x17000002]; ret
syscall
    > 0x100babb8 : int 0x80; sbb al, 0; ret
write mem
    > 0x10011272 : add [eax], edx; ret
    > 0x101497e7 : add [ebx], eax; ret
    > 0x1001dfa3 : adc [ebx], edi; ret
    > 0x10213eaf : add [ebx], ebp; ret
    > 0x1026132d : adc [ecx], eax; pop ebp; ret 4