ropshell> use 13031e736ee4698b8c4813a8f2ae1848 (download)
name         : PassFreely_Implant.dll (i386/PE)
base address : 0x68001000
total gadgets: 890

ropshell> suggest "load mem"
> 0x68005139 : mov eax, [edx]; mov [ebp - 0x24], eax; mov eax, 1; ret
> 0x68005234 : mov ecx, [eax]; mov [ebp - 0x48], ecx; mov eax, 1; ret
> 0x68009056 : mov eax, [esi + 4]; and [eax], 0; pop esi; ret
> 0x680087f9 : mov edx, [eax]; add edx, eax; mov al, 1; mov [ecx], edx; ret
> 0x68005137 : mov edx, [ecx]; mov eax, [edx]; mov [ebp - 0x24], eax; mov eax, 1; ret
> 0x68005682 : mov ecx, [eax + 4]; push ecx; mov edx, [ebp - 4]; call [edx]
> 0x6800803a : mov ecx, [ebp + 0x1c]; mov [ecx], eax; mov eax, [ebp - 0x10]; mov esp, ebp; pop ebp; ret
> 0x680059dd : mov edx, [ebp + 8]; mov eax, [edx]; push eax; call [ebp - 0x30]
> 0x6800520c : mov eax, [edx + 4]; push eax; mov ecx, [ebp - 0x1c]; add ecx, 8; push ecx; call [ebp - 0x24]
> 0x6800567b : mov edx, [ecx + 8]; push edx; mov eax, [ebp - 4]; mov ecx, [eax + 4]; push ecx; mov edx, [ebp - 4]; call [edx]