ropshell> use d45999378336bbf9e62f509d94a57d57 (download)
name         : EasyAntiCheat.exe (i386/PE)
base address : 0x401000
total gadgets: 6488
ropshell> suggest
call
    > 0x00402680 : call eax
    > 0x00409a73 : call ebx
    > 0x00402710 : call ecx
    > 0x0041cc2e : call edx
    > 0x0040b9c2 : call esi
jmp
    > 0x00437922 : jmp eax
    > 0x00454c6b : jmp ecx
    > 0x0043bf0f : jmp esi
    > 0x00420f24 : jmp ebp
    > 0x00443ba7 : jmp esp
load mem
    > 0x00443bfc : mov eax, [ecx]; ret
    > 0x00404ac6 : movzx eax, [edx]; ret
    > 0x004030a0 : mov eax, [ecx + 0x10]; ret
    > 0x00455a14 : mov eax, [edx + 4]; ret
    > 0x0041f4d2 : mov eax, [esi + 0x14]; pop esi; ret
load reg
    > 0x0043219d : pop eax; ret
    > 0x0040a543 : pop ebx; ret
    > 0x00401097 : pop ecx; ret
    > 0x004484d2 : pop edx; ret
    > 0x00401581 : pop esi; ret
pop pop ret
    > 0x0043219d : pop eax; ret
    > 0x0043e685 : pop eax; pop ebp; ret
    > 0x00447ae3 : pop ebx; pop edi; pop ebp; ret
    > 0x004336ac : pop eax; pop edi; pop esi; pop ebp; ret
    > 0x00451647 : pop ecx; pop edi; pop ebx; pop esi; pop ebp; ret
sp lifting
    > 0x00450b2e : add esp, 0x10; ret
    > 0x00450b2e : add esp, 0x10; ret
    > 0x0045b4fd : add esp, 0x20; ret
stack pivoting
    > 0x0041720f : xchg eax, esp; ret
    > 0x00419caf : mov esp, ebx; pop ebx; ret
    > 0x00401195 : mov esp, ebp; pop ebp; ret
    > 0x0042368f : lea esp, [ebp + 0x5d5efffe]; ret
    > 0x004596e3 : mov esp, edi; dec [ebx - 0x743ca21b]; call [ebp - 0x75]
write mem
    > 0x00416796 : add [ecx], eax; ret
    > 0x0041d161 : add [edi], ecx; dec esi; ret
    > 0x00425f77 : add [eax + 0x5d], ebx; ret 0x1c
    > 0x00420b29 : add [eax + 0x595e1846], ecx; ret
    > 0x0044fa3f : add [ebx + 0x3b6602c1], eax; ret