ropshell> use b1d042716b3e413fe75af6c474f3b4f2 (download)
name         : a.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 547

ropshell> suggest "load mem"
> 0x1400021f8 : mov ecx, [rbx]; call rbp
> 0x140002530 : movzx ecx, [rax + 6]; mov eax, ecx; ret
> 0x140002680 : mov eax, [rdx + 0x24]; not eax; shr eax, 0x1f; ret
> 0x140002212 : mov rax, [rbx + 8]; mov rcx, rsi; call rax
> 0x140002213 : mov eax, [rbx + 8]; mov rcx, rsi; call rax
> 0x140001d28 : mov rcx, [rax + 8]; mov r9, rdi; add r12d, 1; call rsi
> 0x140001d24 : mov rdx, [rax + 0x10]; mov rcx, [rax + 8]; mov r9, rdi; add r12d, 1; call rsi
> 0x140001d25 : mov edx, [rax + 0x10]; mov rcx, [rax + 8]; mov r9, rdi; add r12d, 1; call rsi
> 0x14000180f : mov eax, [rcx]; lea rdx, [rip + 0x998c]; movsxd rax, [rdx + rax*4]; add rax, rdx; jmp rax