ropshell> use d5fad1cc387c31792b8fcae48ffea669 (download)
name         : kernel32.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 2743

ropshell> suggest "load mem"
> 0x1800200d0 : mov eax, [rcx + 0x10]; ret
> 0x1800083ac : mov rcx, [rdx]; sub eax, ecx; ret
> 0x1800083ad : mov ecx, [rdx]; sub eax, ecx; ret
> 0x180016f5a : mov eax, [rcx]; add [rax - 0x7d], cl; ret
> 0x180071865 : mov ebp, [rbx]; stc ; dec [rax - 0x75]; ret
> 0x180070876 : mov rax, [rdx + 0x18]; add rax, rcx; ret
> 0x180070877 : mov eax, [rdx + 0x18]; add rax, rcx; ret
> 0x18001679b : mov rsi, [r11 + 0x18]; mov rsp, r11; pop rdi; ret
> 0x18000412f : mov rdi, [r11 + 0x18]; mov rsp, r11; pop r14; ret
> 0x18001780c : mov r14, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
> 0x18001679c : mov esi, [rbx + 0x18]; mov rsp, r11; pop rdi; ret
> 0x180004130 : mov edi, [rbx + 0x18]; mov rsp, r11; pop r14; ret
> 0x180001a3c : mov ecx, [rdx + 0x50]; mov [r8 + 0x50], rcx; ret
> 0x1800384f0 : mov rbp, [r11 + 0x30]; mov rsp, r11; pop r14; pop rdi; pop rsi; ret
> 0x18005b133 : mov r12, [r11 + 0x38]; mov rsp, r11; pop r15; pop r14; pop r13; ret
> 0x180003ac0 : mov r13, [r11 + 0x38]; mov rsp, r11; pop r15; pop r14; pop rbp; ret
> 0x1800384f1 : mov ebp, [rbx + 0x30]; mov rsp, r11; pop r14; pop rdi; pop rsi; ret
> 0x1800606c9 : mov rax, [r9]; call [rip + 0x1a4b6]; xor eax, eax; add rsp, 0x28; ret
> 0x180042870 : mov rax, [r11]; mov [rcx], rax; lea eax, [r10 + r8]; ret
> 0x180042871 : mov eax, [rbx]; mov [rcx], rax; lea eax, [r10 + r8]; ret
> 0x18000412b : mov rbx, [r11 + 0x10]; mov rdi, [r11 + 0x18]; mov rsp, r11; pop r14; ret
> 0x18003cbc7 : mov rcx, [r10 + 0x20]; mov [rsp + 0x20], eax; call [rip + 0x3d31b]; add rsp, 0x48; ret
> 0x180027080 : mov eax, [rdx]; add rcx, rax; lea rax, [r10 + rcx*2]; mov [r9 + 0x188], rax; ret
> 0x180021c8a : mov rax, [rcx + 0x148]; mov ecx, [rcx + 0xb0]; sub ecx, [rax + 8]; mov eax, ecx; ret
> 0x1800606c5 : mov rcx, [r9 + 8]; mov rax, [r9]; call [rip + 0x1a4b6]; xor eax, eax; add rsp, 0x28; ret