ropshell> use d597037c1cdcb1e5a4f95c6b3fae8a8c (download)
name         : RenderdocApi.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 441
ropshell> suggest "load mem"
> 0x180003756 : mov rsi, [r11 + 0x28]; mov rsp, r11; pop rdi; ret
> 0x180004519 : mov r14, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
> 0x18000451a : mov esi, [rbx + 0x28]; mov rsp, r11; pop rbp; ret
> 0x180003752 : mov rbx, [r11 + 0x20]; mov rsi, [r11 + 0x28]; mov rsp, r11; pop rdi; ret
> 0x180004515 : mov rdi, [r11 + 0x20]; mov r14, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
> 0x180004516 : mov edi, [rbx + 0x20]; mov r14, [r11 + 0x28]; mov rsp, r11; pop rbp; ret
> 0x180001698 : mov eax, [rbp + 0xf8]; mov [rbp + 0xc0], eax; mov eax, 1; lea rsp, [rbp + 0xd8]; pop rdi; pop rbp; ret
> 0x1800017f7 : mov rcx, [rbp + 8]; call [rip + 0xe807]; mov [rbp + 0x28], rax; lea rdx, [rip + 0xa964]; mov ecx, 0x2776; call [rbp + 0x28]
> 0x1800017f8 : mov ecx, [rbp + 8]; call [rip + 0xe807]; mov [rbp + 0x28], rax; lea rdx, [rip + 0xa964]; mov ecx, 0x2776; call [rbp + 0x28]