ropshell> use af955bac6a142d481fc7f31bc6c7fffb (download)
name         : kernel32.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 2566

ropshell> suggest
call
    > 0x180034b8d : call rcx
    > 0x1800432f5 : call [rax]
    > 0x1800044d1 : call [rbx]
    > 0x180032617 : call [rcx]
    > 0x18000ef77 : call [rsi]
jmp
    > 0x180046038 : push rsp; ret 3
    > 0x18002475f : jmp rax
    > 0x180001f90 : jmp rcx
    > 0x180002c14 : jmp rdi
    > 0x180046b18 : jmp rsp
load mem
    > 0x180021060 : mov eax, [rcx + 0x10]; ret
    > 0x18000f61b : mov rcx, [rdx]; sub eax, ecx; ret
    > 0x18000f61c : mov ecx, [rdx]; sub eax, ecx; ret
    > 0x1800773d6 : mov rax, [rdx + 0x18]; add rax, rcx; ret
    > 0x1800773d7 : mov eax, [rdx + 0x18]; add rax, rcx; ret
load reg
    > 0x18000aa3e : pop rax; ret
    > 0x180001900 : pop rbx; ret
    > 0x180075fa3 : pop rcx; ret 0
    > 0x1800068e7 : pop rsi; ret
    > 0x18000126f : pop rdi; ret
pop pop ret
    > 0x18000638a : pop r12; ret
    > 0x18000914e : pop r12; pop rbp; ret
    > 0x180007818 : pop r12; pop rdi; pop rbp; ret
    > 0x180069930 : pop r12; pop rdi; pop rbx; pop rbp; ret
    > 0x180004138 : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x1800257d7 : add rsp, 0x118; ret
    > 0x1800257d7 : add rsp, 0x118; ret
    > 0x180006174 : add rsp, 0x28; ret
    > 0x180005e9f : add rsp, 0x38; ret
    > 0x1800088ad : add rsp, 0x48; ret
stack pivoting
    > 0x18003717f : xchg eax, esp; ret
    > 0x1800068e3 : mov rsp, r11; pop r14; ret
    > 0x1800068e4 : mov esp, ebx; pop r14; ret
    > 0x180054f8e : push rbx; add cl, [rax - 0x75]; pop rsp; and al, 8; ret
    > 0x18001336e : leave ; ret
syscall
    > 0x1800250d4 : int 0x80; adc al, 0; add [rbp + 0x2e], dh; ret
write mem
    > 0x180069a8c : add [rax + 0xf], ecx; ret
    > 0x18007af06 : add [rax + 1], edi; ret
    > 0x180007a68 : adc [rcx + 0x20], eax; ret
    > 0x180069a8b : add [r8 + 0xf], ecx; ret
    > 0x180020148 : add [rax], r8; mov eax, 1; ret