ropshell> use d597037c1cdcb1e5a4f95c6b3fae8a8c (download)
name         : RenderdocApi.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 441

ropshell> suggest
call
    > 0x180004593 : call rcx
    > 0x180007961 : call [rax + 0x20c48348]; pop rbp; ret
    > 0x180001811 : call [rbp + 0x28]
jmp
    > 0x180006920 : jmp rax
load mem
    > 0x180003756 : mov rsi, [r11 + 0x28]; mov rsp, r11; pop rdi; ret
    > 0x180004519 : mov r14, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
    > 0x18000451a : mov esi, [rbx + 0x28]; mov rsp, r11; pop rbp; ret
    > 0x180003752 : mov rbx, [r11 + 0x20]; mov rsi, [r11 + 0x28]; mov rsp, r11; pop rdi; ret
    > 0x180004515 : mov rdi, [r11 + 0x20]; mov r14, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
load reg
    > 0x180002879 : pop rax; ret
    > 0x180003afe : pop rbx; ret
    > 0x1800027a2 : pop rsi; ret
    > 0x18000207c : pop rdi; ret
    > 0x1800016b1 : pop rbp; ret
pop pop ret
    > 0x180002879 : pop rax; ret
    > 0x18000384e : pop r12; pop rsi; ret
    > 0x18000384c : pop r13; pop r12; pop rsi; ret
    > 0x180003afa : pop r12; pop rdi; pop rbp; pop rbx; ret
    > 0x180004c4e : pop r12; pop rdi; pop rsi; pop rbx; pop rbp; ret
sp lifting
    > 0x180002fe9 : add rsp, 0x18; ret
    > 0x180002fe9 : add rsp, 0x18; ret
    > 0x180001e95 : add rsp, 0x28; ret
    > 0x1800018da : add rsp, 0x38; ret
    > 0x18000437d : add rsp, 0x458; ret
stack pivoting
    > 0x18000451d : mov rsp, r11; pop rbp; ret
    > 0x18000451e : mov esp, ebx; pop rbp; ret
    > 0x18000183c : lea rsp, [rbp + 0x128]; pop rdi; pop rbp; ret
    > 0x18000183d : lea esp, [rbp + 0x128]; pop rdi; pop rbp; ret
    > 0x180005355 : leave ; call [rip + 0xad34]; add rsp, 0x78; ret
write mem
    > 0x180001955 : add [rax + 0x38c48348], edx; ret