ropshell> use 14b11bf6b3b0d4d54c4f649db701a597 (download)
name         : sdstor.sys (x86_64/PE)
base address : 0x1c0001000
total gadgets: 462
ropshell> suggest "load mem"
> 0x1c0001fec : mov rsi, [r11 + 0x20]; mov rsp, r11; pop rdi; ret
> 0x1c0001fed : mov esi, [rbx + 0x20]; mov rsp, r11; pop rdi; ret
> 0x1c0009548 : mov rbx, [r11 + 0x20]; mov rsp, r11; pop r15; pop r14; pop r12; ret
> 0x1c0002d19 : mov rdi, [r11 + 0x30]; mov rsp, r11; pop r14; pop r13; pop rbp; ret
> 0x1c0002d1a : mov edi, [rbx + 0x30]; mov rsp, r11; pop r14; pop r13; pop rbp; ret
> 0x1c0001fe8 : mov rbp, [r11 + 0x18]; mov rsi, [r11 + 0x20]; mov rsp, r11; pop rdi; ret
> 0x1c0001fe9 : mov ebp, [rbx + 0x18]; mov rsi, [r11 + 0x20]; mov rsp, r11; pop rdi; ret
> 0x1c000be34 : mov rax, [rcx + 0xb8]; mov [rax + 0x20], rdx; lea rax, [rip + 0x1a]; xchg [rcx + 0x68], rax; mov eax, 0x103; ret
> 0x1c000be35 : mov eax, [rcx + 0xb8]; mov [rax + 0x20], rdx; lea rax, [rip + 0x1a]; xchg [rcx + 0x68], rax; mov eax, 0x103; ret