ropshell> use 499fb521a0f4d635f3c1db514920eadd (download)
name         : kernel32.dll (x86_64/RAW)
base address : 0x0
total gadgets: 2813

ropshell> suggest "load mem"
> 0x00020860 : mov eax, [rcx + 0x10]; ret
> 0x0000c0f8 : mov rcx, [rdx]; sub eax, ecx; ret
> 0x0000c0f9 : mov ecx, [rdx]; sub eax, ecx; ret
> 0x000771c2 : mov rax, [rdx + 0x18]; add rax, rcx; ret
> 0x000771c3 : mov eax, [rdx + 0x18]; add rax, rcx; ret
> 0x0001b583 : mov rsi, [r11 + 0x18]; mov rsp, r11; pop rdi; ret
> 0x000179fd : mov rdi, [r11 + 0x18]; mov rsp, r11; pop rbp; ret
> 0x00015ca4 : mov r14, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
> 0x0001b584 : mov esi, [rbx + 0x18]; mov rsp, r11; pop rdi; ret
> 0x000179fe : mov edi, [rbx + 0x18]; mov rsp, r11; pop rbp; ret
> 0x0001911d : mov ecx, [rdx + 0x50]; mov [r8 + 0x50], rcx; ret
> 0x00020883 : movzx eax, [rcx]; add [rdx + 0x24], eax; xor eax, eax; ret
> 0x0003b958 : mov rbp, [r11 + 0x30]; mov rsp, r11; pop r14; pop rdi; pop rsi; ret
> 0x0005b6e7 : mov r12, [r11 + 0x30]; mov rsp, r11; pop r15; pop r14; pop rbp; ret
> 0x00008a10 : mov r13, [r11 + 0x38]; mov rsp, r11; pop r15; pop r14; pop rbp; ret
> 0x0003b959 : mov ebp, [rbx + 0x30]; mov rsp, r11; pop r14; pop rdi; pop rsi; ret
> 0x000663f9 : mov rax, [r9]; call [rip + 0x1c21e]; xor eax, eax; add rsp, 0x28; ret
> 0x000466a8 : mov rax, [r11]; mov [rcx], rax; lea eax, [r10 + r8]; ret
> 0x000466a9 : mov eax, [rbx]; mov [rcx], rax; lea eax, [r10 + r8]; ret
> 0x000179f9 : mov rbx, [r11 + 0x10]; mov rdi, [r11 + 0x18]; mov rsp, r11; pop rbp; ret
> 0x0002d22e : mov eax, [rdx]; add rcx, rax; lea rax, [r10 + rcx*2]; mov [r9 + 0x188], rax; ret
> 0x00022552 : mov rax, [rcx + 0x148]; mov ecx, [rcx + 0xb0]; sub ecx, [rax + 8]; mov eax, ecx; ret
> 0x000663f5 : mov rcx, [r9 + 8]; mov rax, [r9]; call [rip + 0x1c21e]; xor eax, eax; add rsp, 0x28; ret