ropshell> use b76f8a048f5a0a05018d2413694d4daa (download)
name         : rpcrt4.dll (i386/RAW)
base address : 0x0
total gadgets: 4073

ropshell> suggest "load mem"
> 0x00063e93 : mov eax, [ecx + 0x10]; ret
> 0x00021175 : mov eax, [ecx]; dec eax; add esp, 0x28; ret
> 0x000535c2 : mov eax, [edx]; dec eax; add esp, 0x28; ret
> 0x00069517 : mov ecx, [eax + 0xc8]; mov [edx], ecx; ret
> 0x00079f33 : mov edx, [eax]; add [eax], eax; add al, ch; ret
> 0x000b97d1 : mov esi, [ebx + 0x18]; dec ecx; mov esp, ebx; pop edi; ret
> 0x0006158d : mov edi, [ebx + 0x18]; dec ecx; mov esp, ebx; pop ebp; ret
> 0x00014e3a : mov ebp, [ebx + 0x18]; dec ecx; mov esp, ebx; pop edi; ret
> 0x000e03bb : mov eax, [edx + 0x10]; dec ecx; mov [edx + 0x28], eax; ret
> 0x0001eb2a : mov edx, [eax + 0x100]; dec eax; mov [ecx + 0x48], edx; ret
> 0x000694f8 : mov ecx, [eax]; movups xmm0, xmm[ecx + 0x54]; movdqu xmm[edx], xmm0; ret
> 0x0006d027 : mov esi, [ebp + 0x38]; dec eax; lea esp, [ebp + 0x10]; pop ebp; ret
> 0x000be541 : mov edx, [ecx + 0xc0]; xor eax, eax; dec eax; cmp [edx + 0x1d0], eax; setne al; ret
> 0x0006d023 : mov edi, [ebp + 0x30]; dec esp; mov esi, [ebp + 0x38]; dec eax; lea esp, [ebp + 0x10]; pop ebp; ret
> 0x000ca0f8 : mov ecx, [edx + 8]; mov [ecx], ax; dec eax; add [edx + 8], 6; or [edx + 0x1a2], 4; ret
> 0x000d7e7d : mov ecx, [esi + 0x10]; dec eax; mov edx, edi; inc ecx; movzx eax, [eax]; inc ecx; call [ecx + eax*8]