ropshell> use 1750752e88087e169b97ae8e4052abb5 (download)
name         : EScript_180020038.api (i386/PE)
base address : 0x23801000
total gadgets: 21964
ropshell> suggest "write mem"
> 0x238f9a28 : add [ebx], eax; ret
> 0x23980dba : add [ebx], ecx; ret
> 0x23921fe2 : adc [ebx], edi; ret
> 0x23822aa5 : adc [ebx], ebp; ret
> 0x23802889 : add [ecx], eax; ret
> 0x23932668 : add [edi], ecx; inc ebx; ret
> 0x23920edf : adc [eax + 0x5de58b01], esi; ret
> 0x2389ce67 : adc [eax + 0x2389ce6e], edi; ret
> 0x238ed8b0 : adc [ebx + 0x6b], eax; ret
> 0x2387a9a8 : add [ebx + 0x8bc804], ecx; ret
> 0x2392bd40 : adc [edx + 0x2880441], ecx; ret
> 0x23809ae2 : add [esi + 0x5d], ebx; ret
> 0x23868bbb : add [edi + 0x5e], ebx; ret
> 0x238291e8 : adc [ecx + 0x18], eax; pop ebp; ret 0x10
> 0x23911aa9 : add [esi + 4], eax; pop esi; ret
> 0x23871331 : add [ebx], edx; xchg [ebx], esp; ret
> 0x23981cbd : add [ecx], esi; pop edi; pop esi; pop ebp; ret
> 0x2384392e : adc [ecx], edi; test [ebx], ah; ret
> 0x238c377e : add [edi], esi; pop edi; pop esi; pop ebp; ret
> 0x23841d8f : add [ecx + 0x5f], ebx; pop esi; pop ebp; ret 4
> 0x2385986e : adc [edx + 2], ebp; pop eax; pop ebp; ret
> 0x2382743f : add [ebp + 3], esi; xor al, al; ret
> 0x2397d01f : add [edx], eax; mov al, 1; pop esi; pop ebp; ret 8
> 0x238d1c81 : add [eax + 0xf], ebx; inc ebp; fcomp [esi - 0x76]; ret
> 0x23933252 : add [eax + 0x5b5e5f19], ecx; mov esp, ebp; pop ebp; ret 0xc
> 0x23865e49 : add [eax + 0x56], edx; call ecx
> 0x238d55bd : add [esi + 2], edi; sar eax, 1; pop ebp; ret 4
> 0x2393832d : adc [edi + 0x10], eax; pop edi; pop esi; pop ebp; ret 0xc
> 0x23866e57 : add [edi + 8], esi; pop edi; pop esi; pop ebp; ret 8
> 0x2386f485 : adc [ebp + 0x500474c0], eax; call edi
> 0x2386e917 : add [ebx], esi; call [ecx - 0x75]
> 0x2385fb5d : adc [edx + 0x39e85623], ebx; add edi, esi; inc [ebx - 0x4a97b73c]; ret
> 0x238d7db1 : add [eax], edx; add [eax], al; mov ax, dx; pop ebp; ret
> 0x23866de3 : add [eax], esi; pop edi; pop esi; pop ebx; mov esp, ebp; pop ebp; ret 0x14
> 0x238d4802 : adc [eax], ebp; clc ; call [ebx - 0x18]
> 0x238d9cc5 : add [edx], ebp; push ebx; call [eax + 0x1c]
> 0x2397c77a : add [esi], eax; mov al, 1; pop edi; pop esi; pop ebx; pop ebp; ret 8
> 0x23950ad9 : adc [esi + 0x57], edx; call [edx + 4]
> 0x23880ffd : add [edi + 0x56], edx; call [eax + 0x64]
> 0x2394c1cc : add [ebp + 0x5750ff45], ecx; call [edi]
> 0x2382d597 : adc [ebx + 9], esi; mov eax, [ecx*4 + 0x239af618]; pop ebp; ret
> 0x2398219e : add [edx + 0x208], esi; sub [edx + 0x20c], esi; pop esi; pop ebp; ret 4
> 0x23874f3b : add [esi + 0x10], ecx; push [esi + 0x10]; call [eax + 0x10]
> 0x23877d90 : add [ebx + 0x6a], edx; add [ebp - 0x5217f3b3], ecx; cld ; call [ebx + 0x6a]
> 0x238475e1 : add [ecx + 0x68], edx; inc [eax]; add [eax], al; call [eax + 0xc]
> 0x2390e9c8 : add [eax + 0x44], ebp; add [eax], eax; add bl, ch; aad 0xb0; add [edi + 0x5e], ebx; pop ebp; ret
> 0x238312cd : add [edi], ebp; add [eax - 0x73], dl; lea edi, [eax - 0x17000003]; mov al, [esi + edi*8]; call [eax - 1]