ropshell> use 72830e8ced936faef098dcab0fa16136 (download)
name         : tbbmalloc.dll (i386/PE)
base address : 0x10001000
total gadgets: 1702

ropshell> suggest "load mem"
> 0x100015a0 : mov eax, [ecx]; ret
> 0x10001510 : mov eax, [ecx + 0x48]; ret
> 0x1000406f : mov esi, [eax]; call edi
> 0x1000214e : mov eax, [edx + 0x1c]; pop edi; pop esi; pop ecx; ret
> 0x1000215b : mov eax, [esi + 0x48]; pop edi; pop esi; pop ecx; ret
> 0x10004d05 : mov ecx, [eax + 0x20a0]; push ecx; call edx
> 0x100040bb : mov edx, [eax + 0x20b0]; push ecx; call edx
> 0x10001b68 : mov edx, [eax]; inc [ecx + 0x5c]; mov [ecx + 0x54], edx; ret
> 0x1000214c : mov edx, [edi]; mov eax, [edx + 0x1c]; pop edi; pop esi; pop ecx; ret
> 0x100051ef : mov edx, [edi + 0x20b0]; push eax; push esi; push ecx; call edx
> 0x10001404 : mov ecx, [eax]; mov edx, [esp + 8]; xor eax, eax; cmp ecx, [edx]; sete al; ret
> 0x100051e9 : mov ecx, [edi + 0x20a0]; mov edx, [edi + 0x20b0]; push eax; push esi; push ecx; call edx
> 0x100041d8 : mov edi, [eax]; push edx; push eax; mov eax, [ecx + 0x20a0]; mov ecx, [ecx + 0x20b0]; push eax; call ecx
> 0x10004150 : mov edx, [ecx + 0x14]; xor eax, eax; mov [ecx], eax; mov [edx + ecx + 4], eax; mov [ecx + 0x10], eax; ret