ropshell> use cd602bfcce93143c096d0c76c31c8a51 (download)
name         : Dumped_test.exe (i386/PE)
base address : 0x401000
total gadgets: 44609

ropshell> suggest "write mem"
> 0x0041aba4 : add [ebx], eax; ret
> 0x0041423d : add [ebx], ecx; ret
> 0x00570a37 : add [ebx], esi; ret
> 0x0040136f : add [ebx], edi; ret
> 0x0067cd77 : adc [ebx], ebp; ret
> 0x004cddbe : add [ecx], eax; ret
> 0x004c93db : add [edx], esi; ret
> 0x004e0336 : add [edx], edi; ret
> 0x004cd46d : add [esi], edx; pop ebx; ret
> 0x004c39a7 : add [edi], ecx; lahf ; ret
> 0x0056d27d : add [eax + 0x5e01be54], ebx; ret
> 0x00513852 : add [eax + 0x1dc], ecx; ret
> 0x0056fac0 : add [eax + 0x20], edx; ret
> 0x0063bdb2 : add [eax + 0x10000], edi; ret
> 0x004a4c96 : add [eax + 0x20], ebp; ret 0x68
> 0x00568325 : add [ebx + 0x18901c0], eax; ret
> 0x0042a895 : add [ebx + 0x3b0c9744], ecx; ret
> 0x0042e4f7 : add [ecx + 0x2a4], eax; ret
> 0x005706b1 : add [edx + 0xcc483c2], ecx; ret
> 0x00594739 : add [esi + 0x13b0], eax; ret
> 0x00418241 : add [esi + 0x59], ebx; ret
> 0x004421ef : add [esi + 0x20], ecx; ret
> 0x004437e4 : add [edi + 0x59], ebx; ret
> 0x005060c4 : add [ebp + 0x59], ebx; ret
> 0x0042ae81 : adc [ebp + 0x595b5e06], edx; ret
> 0x0067a56c : add [ebp + 1], esi; ret
> 0x005641b1 : add [eax], ecx; add esp, 8; ret
> 0x004bf6ff : add [eax + 0xc], esi; pop esi; ret
> 0x0052fdce : add [edx + 0x5f], edi; pop esi; ret
> 0x005392e3 : add [esi + 0xf], edx; pushfd ; ret
> 0x006582d0 : add [ebp + 0x5beb75f6], eax; pop esi; ret
> 0x00451d49 : add [ecx], edi; pop edi; pop esi; pop ecx; ret
> 0x00576d1c : add [edx], ebp; call esi
> 0x004cd435 : add [esi], ecx; mov al, 1; pop ebp; ret
> 0x00559a94 : add [ebx + 0x33], edx; fstp x[ebx]; ret
> 0x004e12a4 : add [ecx + 0x6a], edx; add eax, ebp; ret
> 0x006753a0 : add [esi + 6], edi; mov eax, 1; ret
> 0x0045aac3 : add [edi + 0x14f4], eax; add esp, 0x20; ret
> 0x0064e7b9 : add [ebp + 0x5d5e0146], ecx; pop ebx; pop ecx; ret
> 0x0051ba2e : add [edi + 0x56], edx; call ebx
> 0x004ce368 : add [esi], eax; fldz ; mov [edi], 0; pop ecx; ret
> 0x0057b49b : adc [esi], edi; add [eax], al; xor eax, eax; ret
> 0x004dcb6b : add [edi], ebx; add [eax], al; add esp, 8; ret
> 0x005e2556 : add [ebp], eax; pop ebx; mov eax, edi; pop edi; pop ebp; ret
> 0x005cb84e : add [ebx + 0xa], esi; or eax, -1; add esp, 0x174; ret
> 0x00547a6c : add [ecx + 0x5f], edi; pop esi; xor eax, eax; pop ebx; ret
> 0x005b9792 : add [edx + 8], eax; pop edi; pop esi; pop ebp; pop ebx; ret
> 0x0044de15 : add [edx + 0x1b], ebp; push esi; call eax
> 0x005081f1 : add [edi + 0x858], ebp; pop esi; pop ebp; add esp, 0x34; ret
> 0x005a7e15 : add [ebp + 5], edi; mov eax, 1; add esp, 0x10; ret
> 0x004a0eb2 : add [ebx], edx; add [ebx + 0x5e5f14c4], al; pop ebp; pop ebx; pop ecx; ret
> 0x00672bee : add [esi], ebx; add [eax], al; jmp [0]
> 0x00463864 : adc [edi], edx; add [ebx + 0x5d5f24c4], al; pop ebx; add esp, 0x2c; ret
> 0x004916fb : add [eax], ebp; add [ebx + 0x5d5f14c4], al; pop ebx; pop esi; add esp, 0x94; ret
> 0x0057821b : add [esi], ebp; add [eax], al; add esp, 4; mov ax, si; pop esi; ret
> 0x0064c3db : adc [edx + 2], ebx; add [ebx - 0x2708f73c], al; sbb eax, eax; add eax, 1; ret
> 0x004466d0 : add [edi + 0x1cc], ecx; mov [edi + 0x1c4], eax; pop ebx; mov esp, ebp; pop ebp; ret
> 0x004cd42e : add [ecx], edx; or ecx, -1; sub ecx, eax; add [esi], ecx; mov al, 1; pop ebp; ret