ropshell> use df81d3b7bf8664873759beaaa0583b0b (download)
name         : tshark.exe (i386/PE)
base address : 0x401000
total gadgets: 1291

ropshell> suggest "load mem"
> 0x004125f9 : mov eax, [ecx]; pop ebp; ret
> 0x00421213 : mov eax, [ebp + 0xc]; pop ebp; ret
> 0x004391f6 : mov ecx, [ebp + 0xc]; ror eax, cl; pop ebp; ret
> 0x004125f6 : mov ecx, [eax + 4]; mov eax, [ecx]; pop ebp; ret
> 0x00421827 : mov edx, [ebp + 0x10]; mov [edx], 0; pop ebp; ret
> 0x004296a1 : mov eax, [edx]; sub eax, 1; mov ecx, [ebp + 8]; mov [ecx], eax; pop ebp; ret
> 0x0041a25d : mov edx, [ecx + 0x20028]; add dx, 1; mov eax, [ebp + 0x10]; mov [eax + 0x20028], dx; pop ebp; ret
> 0x00439a41 : mov eax, [ecx + 4]; mov ecx, [ebp - 8]; mov [ecx], edx; mov [ecx + 4], eax; mov esp, ebp; pop ebp; ret