ropshell> use b94b59adfba87d97669ec2ad881973d4 (download)
name         : ucrtbase.dll (i386/RAW)
base address : 0x0
total gadgets: 4531

ropshell> suggest "load mem"
> 0x0003fa90 : mov eax, [ecx + 0x10]; ret
> 0x00010e98 : mov ecx, [eax + 0x63]; ret
> 0x000f4eb9 : mov edi, [ebx + 0x73]; ret
> 0x00022406 : movzx ecx, [edx]; sub eax, ecx; ret
> 0x00007166 : mov eax, [ecx]; add [ebx], bh; ret
> 0x00030363 : mov eax, [ebx + 0x10]; mov [ecx], eax; ret
> 0x00007112 : mov esi, [ebx + 0x18]; dec ecx; mov esp, ebx; pop edi; ret
> 0x0002ed9f : mov eax, [edx + 0x78]; dec eax; mov [ecx], eax; xor eax, eax; ret
> 0x0004262b : mov ebx, [ebp + 0x20]; dec eax; lea esp, [ebp + 0x10]; pop ebp; ret
> 0x0009938f : mov edi, [ebp + 0x40]; dec eax; lea esp, [ebp + 0x20]; pop ebp; ret
> 0x00052ef5 : mov eax, [edx]; mov [eax], cl; dec eax; inc [edx]; movzx eax, cl; ret
> 0x00078f35 : movzx ecx, [eax]; mov [edx], cx; mov al, 1; dec eax; add esp, 0x38; ret
> 0x0004422a : mov ebp, [ecx + 0x18]; dec eax; mov esp, [ecx + 0x10]; jmp edx
> 0x0003035c : mov ecx, [edx + 0x4a0]; inc ecx; mov eax, [ebx + 0x10]; mov [ecx], eax; ret
> 0x0001e728 : mov ebp, [ebx + 0x18]; dec ecx; mov esi, [ebx + 0x20]; dec ecx; mov esp, ebx; pop edi; ret
> 0x0009938b : mov esi, [ebp + 0x38]; dec eax; mov edi, [ebp + 0x40]; dec eax; lea esp, [ebp + 0x20]; pop ebp; ret
> 0x00044226 : mov edx, [ecx + 0x50]; dec eax; mov ebp, [ecx + 0x18]; dec eax; mov esp, [ecx + 0x10]; jmp edx