ropshell> use f3bdaf1c0473bf2f21ce95a575116f61 (download)
name         : AntAPI.dll (i386/PE)
base address : 0x10001000
total gadgets: 1417

ropshell> suggest "load mem"
> 0x100044dc : mov eax, [esi]; pop edi; pop esi; ret 4
> 0x10001d06 : mov ecx, [eax]; call [ecx + 4]; ret 4
> 0x10003271 : mov eax, [ebp + 8]; pop esi; pop ebx; pop ebp; ret 0x10
> 0x10003ac6 : mov eax, [edi]; push edi; call [eax + 4]
> 0x1000356f : mov edx, [ecx + 0x18]; push edx; push ecx; call eax
> 0x1000330e : mov eax, [esi + 0x78]; push [eax + edi*4]; call ebp
> 0x10001b05 : mov edx, [eax]; push ecx; push [esp + 0xc]; push eax; call [edx]
> 0x1000738d : mov ecx, [ebp + 8]; mov [ebx + 8], ecx; mov [ebx + 4], eax; mov [ebx + 0xc], ebp; pop ecx; pop ebx; ret 4
> 0x10003923 : mov eax, [edi + 0xc]; push [ebp + 0x10]; mov ecx, [eax]; push [ebp + 0xc]; push eax; call [ecx + 0x28]
> 0x10001d22 : mov esi, [ebp + 8]; push [ebp + 0x10]; mov eax, [esi + 4]; push [ebp + 0xc]; mov ecx, [eax]; push eax; call [ecx]