ropshell> use fc3391a5231682273c849d213abb05ea (download)
name         : kernel32.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 2694

ropshell> suggest "load mem"
> 0x18001d990 : mov eax, [rcx + 0x10]; ret
> 0x18007aed6 : mov rax, [rdx + 0x18]; add rax, rcx; ret
> 0x18007aed7 : mov eax, [rdx + 0x18]; add rax, rcx; ret
> 0x1800155d3 : mov rsi, [r11 + 0x18]; mov rsp, r11; pop rdi; ret
> 0x180015e8b : mov rdi, [r11 + 0x18]; mov rsp, r11; pop rbp; ret
> 0x18000f74b : mov r14, [r11 + 0x28]; mov rsp, r11; pop r15; ret
> 0x1800155d4 : mov esi, [rbx + 0x18]; mov rsp, r11; pop rdi; ret
> 0x180015e8c : mov edi, [rbx + 0x18]; mov rsp, r11; pop rbp; ret
> 0x180038c13 : mov ecx, [rdx + 0x50]; mov [r8 + 0x50], rcx; ret
> 0x18001d9c3 : movzx eax, [rcx]; add [rdx + 0x24], eax; xor eax, eax; ret
> 0x18007f392 : mov rbp, [r11 + 0x30]; mov rsp, r11; pop r14; pop rdi; pop rsi; ret
> 0x180063511 : mov r12, [r11 + 0x38]; mov rsp, r11; pop r15; pop r14; pop r13; ret
> 0x180050ee1 : mov r13, [r11 + 0x38]; mov rsp, r11; pop r15; pop r14; pop rbp; ret
> 0x18007f393 : mov ebp, [rbx + 0x30]; mov rsp, r11; pop r14; pop rdi; pop rsi; ret
> 0x180069773 : mov rax, [r9]; call [rip + 0x1cf94]; xor eax, eax; add rsp, 0x28; ret
> 0x18004895c : mov rax, [r11]; mov [rcx], rax; lea eax, [r10 + r8]; ret
> 0x18004895d : mov eax, [rbx]; mov [rcx], rax; lea eax, [r10 + r8]; ret
> 0x180015e87 : mov rbx, [r11 + 0x10]; mov rdi, [r11 + 0x18]; mov rsp, r11; pop rbp; ret
> 0x18000f71e : mov edi, [rax]; add al, [rax]; add al, ch; adc r8d, [rax]; add [rax - 0x75], cl; ret
> 0x1800601a3 : mov rax, [rcx + 0x100]; mov ecx, [rcx + 0xb0]; sub ecx, [rax + 8]; mov eax, ecx; ret
> 0x18006976f : mov rcx, [r9 + 8]; mov rax, [r9]; call [rip + 0x1cf94]; xor eax, eax; add rsp, 0x28; ret