ropshell> use 177c3e29e9a341dc64f2e17f08305d01 (download)
name         : avast_free_antivirus_setup_online.exe (i386/PE)
base address : 0x401000
total gadgets: 2542

ropshell> suggest "load mem"
> 0x0041f584 : mov eax, [edx + 4]; ret
> 0x00412d83 : mov eax, [ecx + 8]; pop ebp; ret
> 0x00410eb1 : mov ebp, [ebx + 0x20]; jmp eax
> 0x0040c770 : mov eax, [ebx]; pop edi; pop esi; pop ebx; pop ebp; ret
> 0x0040c77b : mov eax, [esi]; pop edi; pop esi; neg eax; pop ebx; pop ebp; ret
> 0x00406c53 : mov eax, [ebp + 8]; mov [eax], 0; pop ebp; ret
> 0x00412854 : mov ecx, [ebp + 8]; call [ebp + 0xc]; pop ebp; ret 0xc
> 0x004157ef : mov eax, [edx]; add [eax], 2; mov al, 1; pop ebp; ret 8
> 0x0041168e : mov ecx, [edx + ecx]; add ecx, esi; add eax, ecx; pop esi; pop ebp; ret
> 0x0040fb7d : mov ecx, [eax + 4]; or [eax], 2; mov [eax + 4], ecx; ret
> 0x0041156e : mov eax, [edi]; mov [ecx], eax; mov [ecx + 4], 0; pop edi; pop ebp; ret
> 0x00410d22 : mov ebx, [ebp + 0xc]; mov ebp, [ebp - 4]; mov esp, [ebx - 4]; jmp eax
> 0x0040688d : mov eax, [esi + 0xc]; mov [edi + 0xc], eax; mov eax, edi; pop edi; pop esi; pop ebp; ret 4
> 0x0041168b : mov edx, [esi + edx]; mov ecx, [edx + ecx]; add ecx, esi; add eax, ecx; pop esi; pop ebp; ret