ropshell> use 5c42d7edad34b9a6fbc573699657f674 (download)
name         : iw4x.exe (i386/PE)
base address : 0x401000
total gadgets: 50584
ropshell> suggest "write mem"
> 0x004f8027 : add [ebx], eax; ret
> 0x0050c8ad : add [ebx], ecx; ret
> 0x004e7844 : add [ebx], esi; ret
> 0x004e2d8d : adc [ebx], edi; ret
> 0x0054f4ac : add [ebx], ebp; ret
> 0x005a5560 : adc [ecx], eax; ret
> 0x004b52ef : add [edx], eax; ret
> 0x0050a8ac : add [edx], ecx; ret
> 0x004fb3b8 : adc [edx], esi; ret
> 0x005b9986 : add [edx], edi; ret
> 0x004b12cf : add [edi], eax; ret
> 0x00613fbe : add [eax], ecx; pop esi; ret
> 0x005ade3d : add [esi], edx; pop ebx; ret
> 0x004faea7 : add [edi], ecx; lahf ; ret
> 0x006bbad4 : adc [eax + eax], ebx; ret
> 0x00461762 : add [eax + 0x1dc], ecx; ret
> 0x0044e220 : add [eax + 0x20], edx; ret
> 0x0069b292 : add [eax + 0x10000], edi; ret
> 0x0040566b : add [eax + 0x20], ebp; ret
> 0x0048c536 : adc [ebx + 0x5b011440], eax; ret
> 0x005232d5 : add [ebx + 0x3b0c9744], ecx; ret
> 0x006142db : add [ebx + 0x5b], ebp; ret
> 0x00527987 : add [ecx + 0x2a4], eax; ret
> 0x004016b1 : add [edx + 0xcc483c2], ecx; ret
> 0x0062d7e9 : add [esi + 0x13b0], eax; ret
> 0x0048e018 : add [esi + 0x59], ebx; ret
> 0x00546cef : add [esi + 0x20], ecx; ret
> 0x00548334 : add [edi + 0x59], ebx; ret
> 0x004c68fc : add [ebp + 0x59], ebx; ret
> 0x006b3bac : add [ebp + 1], esi; ret
> 0x0063e057 : add [eax + 0x3c601], esi; pop esi; ret
> 0x0045380a : add [ebx + 0x5f], edi; pop esi; ret
> 0x005e50ee : add [edx + 0x5f], edi; pop esi; ret
> 0x005eb833 : add [esi + 0xf], edx; pushfd ; ret
> 0x006b65b0 : add [ebp + 0x5beb75f6], eax; pop esi; ret
> 0x004375cc : add [edx], ebp; call esi
> 0x005ade05 : add [esi], ecx; mov al, 1; pop ebp; ret
> 0x004857d9 : add [ebp], eax; pop esi; pop ebp; pop ebx; ret
> 0x00609a02 : add [ebx + 0x18], esi; mov al, 1; ret
> 0x00442064 : add [ecx + 0x6a], edx; add eax, ebp; ret
> 0x006ae9e0 : add [esi + 6], edi; mov eax, 1; ret
> 0x004aa768 : add [edi + 0x28], eax; pop edi; pop esi; ret
> 0x006ad269 : add [ebp + 0x5d5e0146], ecx; pop ebx; pop ecx; ret
> 0x005325cb : add [ecx], edx; add [edi + 0x5e], bl; ret
> 0x0054d2e1 : add [ecx], edi; pop edi; pop esi; pop ebx; pop ecx; ret
> 0x004839f8 : add [ebx + 0x56], edx; call eax
> 0x0047117e : add [edi + 0x56], edx; call ebx
> 0x0050655c : add [ebp + 0x50], edx; call edx
> 0x005ae9c8 : add [esi], eax; fldz ; mov [edi], 0; pop ecx; ret
> 0x00412a73 : add [edi], edx; add [ebx + 0x5b5f04c4], al; pop esi; ret
> 0x004624ac : add [ecx + 0x5f], edi; pop esi; xor eax, eax; pop ebx; ret
> 0x00645912 : add [edx + 8], eax; pop edi; pop esi; pop ebp; pop ebx; ret
> 0x0052f285 : add [edx + 0x1b], ebp; push esi; call eax
> 0x005c9dd1 : add [edi + 0x858], ebp; pop esi; pop ebp; add esp, 0x34; ret
> 0x006386f5 : add [ebp + 5], edi; mov eax, 1; add esp, 0x10; ret
> 0x0041926d : add [eax], ebx; add [eax], al; add [eax - 0x3fcd3cff], dh; ret
> 0x006d1094 : add [esi], ebx; add [eax], al; jmp [0]
> 0x00644d2d : add [eax], edi; or esp, 1; add [eax], al; pop esi; sete al; pop ebp; ret
> 0x00495c8b : add [edx + 0xf], esi; add [ebx + 0x5e5f14c4], al; pop ebp; pop ebx; add esp, 0x14; ret
> 0x00545eb0 : add [edi + 0x1cc], ecx; mov [edi + 0x1c4], eax; pop ebx; mov esp, ebp; pop ebp; ret
> 0x00402d12 : add [eax], ebp; add [ebx + 0x5e5f18c4], al; pop ebp; mov al, 1; pop ebx; add esp, 0x200; ret