ropshell> use 024ff462edfc76100b9372a0fc57b7cf (download)
name         : healiat.exe (i386/PE)
base address : 0x401000
total gadgets: 1500

ropshell> suggest "load mem"
> 0x004055ab : mov eax, [ebp + 0x10]; pop ebp; ret
> 0x004123cb : movzx eax, [ecx]; inc ecx; mov [edx], ecx; ret
> 0x00405e26 : mov eax, [ecx + 0x16c]; mov esp, ebp; pop ebp; ret
> 0x0040f3d8 : mov ecx, [eax]; mov eax, [eax + 4]; push eax; ret
> 0x0040ee89 : mov ebp, [ebx + 0x20]; jmp [ebx + 0x18]
> 0x00405db4 : mov eax, [edx + 0x240]; add eax, ecx; mov esp, ebp; pop ebp; ret 4
> 0x004116cd : mov ecx, [esi + ecx]; add ecx, edx; add eax, ecx; pop esi; ret
> 0x004123c9 : mov ecx, [edx]; movzx eax, [ecx]; inc ecx; mov [edx], ecx; ret
> 0x004052da : mov ecx, [ebp + 0xc]; mov [eax], ecx; mov esp, ebp; pop ebp; ret 8
> 0x0040ec50 : mov ebx, [ebp + 0xc]; mov esp, [ebx - 4]; mov ebp, [ebp - 4]; jmp eax
> 0x00405507 : mov edx, [ebp + 0x2c]; mov [ecx], edx; mov eax, [ebp + 8]; pop ebp; ret
> 0x00405677 : mov eax, [edx]; mov [ecx + 8], eax; mov eax, [ebp - 4]; mov esp, ebp; pop ebp; ret
> 0x0040571d : mov edx, [eax + 8]; xor eax, eax; cmp edx, [ecx + 8]; sete al; mov esp, ebp; pop ebp; ret 4
> 0x0040515f : mov edx, [ecx + 0xc]; mov [eax + 0xc], edx; mov eax, [ebp - 4]; mov esp, ebp; pop ebp; ret 4
> 0x00404c28 : mov ecx, [eax + 0x2c]; add ecx, 1; mov edx, [ebp - 4]; mov [edx + 0x2c], ecx; mov esp, ebp; pop ebp; ret 4
> 0x004116c7 : mov esi, [edx + esi]; mov ecx, [ecx + 8]; mov ecx, [esi + ecx]; add ecx, edx; add eax, ecx; pop esi; ret
> 0x0040ec45 : mov eax, [ebx]; mov fs:[0], eax; mov eax, [ebp + 8]; mov ebx, [ebp + 0xc]; mov esp, [ebx - 4]; mov ebp, [ebp - 4]; jmp eax