ropshell> use 5a015a7bc083cf266b5cf0c388345c17 (download)
name         : bfs-eko18.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 555

ropshell> suggest "load mem"
> 0x14000621a : mov eax, [rcx + 0x1c]; add rsp, 0x28; ret
> 0x140006ae9 : mov rax, [rcx + 0x158];  inc [rax + 0x160]; ret
> 0x140008a85 : mov rsi, [r11 + 0x18]; mov rsp, r11; pop rdi; ret
> 0x140006497 : mov rdi, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
> 0x140008a86 : mov esi, [rbx + 0x18]; mov rsp, r11; pop rdi; ret
> 0x140006498 : mov edi, [rbx + 0x28]; mov rsp, r11; pop rbp; ret
> 0x1400053cd : mov edx, [rbx + 0xb0]; mov ecx, 8; call r8
> 0x1400046bb : mov edx, [rsi + 0xb0]; mov ecx, edi; call r13
> 0x140008a81 : mov rbx, [r11 + 0x10]; mov rsi, [r11 + 0x18]; mov rsp, r11; pop rdi; ret
> 0x140005bbc : mov rbp, [r11 + 0x28]; mov rdi, [r11 + 0x30]; mov rsp, r11; pop r14; pop r13; pop r12; ret
> 0x140005bbd : mov ebp, [rbx + 0x28]; mov rdi, [r11 + 0x30]; mov rsp, r11; pop r14; pop r13; pop r12; ret
> 0x140002e50 : mov eax, [rbx]; lea rcx, [rsp + 0x30]; mov rdx, r13; add rax, r15; call rax