ropshell> use 39ca78346ddfcfce20e4a5aa273e1812 (download)
name         : HuiMangDocs.exe (i386/PE)
base address : 0x401000
total gadgets: 329

ropshell> suggest "load mem"
> 0x004021c7 : mov edx, [esi]; call edx
> 0x004015af : mov eax, [ebp + 8]; mov esp, ebp; pop ebp; ret
> 0x00401702 : mov edx, [esi + 4]; call edx
> 0x0040396b : mov ecx, [eax + 4]; or [eax], 2; mov [eax + 4], ecx; ret
> 0x004021c2 : mov esi, [ecx]; mov ecx, [eax + edx*4]; mov edx, [esi]; call edx
> 0x004011c4 : mov edx, [ebp + 0xc]; mov eax, [ebp - 0x10]; mov [edx], eax; mov eax, [ebp - 0x1c]; mov esp, ebp; pop ebp; ret
> 0x00402ced : mov edx, [ecx]; mov [eax + 0x1c], edx; mov ecx, [ecx + 4]; mov [eax + 0x20], ecx; mov esp, ebp; pop ebp; ret 4