ropshell> use d45999378336bbf9e62f509d94a57d57 (download)
name         : EasyAntiCheat.exe (i386/PE)
base address : 0x401000
total gadgets: 6488

ropshell> suggest "load mem"
> 0x00443bfc : mov eax, [ecx]; ret
> 0x00404ac6 : movzx eax, [edx]; ret
> 0x004030a0 : mov eax, [ecx + 0x10]; ret
> 0x00455a14 : mov eax, [edx + 4]; ret
> 0x0041f4d2 : mov eax, [esi + 0x14]; pop esi; ret
> 0x00423885 : mov eax, [ebp + 0xc]; pop ebp; ret
> 0x0040b3ae : mov eax, [esi]; call eax
> 0x00437aac : mov ebp, [ebx + 0x20]; jmp eax
> 0x0042524a : mov ecx, [ebp + 0xc]; call esi
> 0x0041af3a : mov edx, [ecx + 0xc]; mov esp, ebp; pop ebp; ret
> 0x0040457e : mov eax, [ebx]; call [eax + 4]
> 0x00407aed : mov eax, [edi]; call [eax + 0x30]
> 0x0040e213 : mov ecx, [eax]; call [ecx + 8]
> 0x00416ab6 : mov ecx, [esi]; mov [eax + 8], ecx; pop esi; ret
> 0x0040ed07 : mov edx, [eax]; call [edx + 4]
> 0x00408c1a : mov edx, [ebx]; call [edx + 4]
> 0x00407da0 : mov edx, [ecx]; call [edx + 8]
> 0x00407c59 : mov edx, [esi]; call [edx + 4]
> 0x0040bf7d : mov ecx, [esi + 0x18]; pop edi; pop esi; mov eax, ecx; pop ebx; ret
> 0x0040c34f : mov eax, [edi + 0x34]; pop edi; pop esi; pop ebx; mov esp, ebp; pop ebp; ret 0x10
> 0x00438147 : mov ecx, [edx + ecx]; add ecx, esi; add eax, ecx; pop esi; pop ebp; ret
> 0x004199ec : mov ecx, [eax + 0x30]; mov eax, [ecx]; call [eax + 4]; pop ebp; ret
> 0x00404781 : mov edx, [eax + 4]; lea eax, [edx - 0x18]; mov [edx + ecx - 0x1c], eax; ret
> 0x00437919 : mov ebx, [ebp + 0xc]; mov ebp, [ebp - 4]; mov esp, [ebx - 4]; jmp eax
> 0x004029f6 : mov edx, [ebp + 0xc]; mov [eax], edx; mov [eax + 4], ecx; pop ebp; ret 8
> 0x004193b2 : mov eax, [ebx + 0x14]; mov [edi + 0x14], eax; mov eax, edi; pop edi; pop ebx; pop ebp; ret 4
> 0x0040ed65 : mov ecx, [edi + 0x38]; push [ebp - 0xfc]; mov eax, [ecx]; call [eax + 0x18]
> 0x0041c2e4 : mov edx, [esi + 4]; mov [esi + 8], ecx; mov [eax + 4], edx; pop esi; pop ebp; ret 8
> 0x00404576 : mov ebx, [eax + 4]; mov ecx, ebx; mov [ebp - 0x34], ebx; mov eax, [ebx]; call [eax + 4]
> 0x00404c71 : mov esi, [eax + 4]; mov ecx, esi; mov [ebp - 0x14], esi; mov eax, [esi]; call [eax + 4]