ropshell> use 0d2e302910fccc2094dcab8e24739dc8 (download)
name         : TEFW.exe (i386/PE)
base address : 0x401000
total gadgets: 19404

ropshell> suggest "write mem"
> 0x00408297 : adc [ebx], ecx; ret
> 0x0045b05f : adc [ebx], edi; ret
> 0x00404b15 : add [edx], edi; ret
> 0x004511e9 : adc [ebp], eax; ret
> 0x0040c70d : add [esi + 0x5f], ebx; ret 4
> 0x00454aee : add [edi + 0x5e], ebx; ret 0xc
> 0x0044e667 : add [ebp + 0x3b], esi; ret
> 0x0040535e : add [edi], ebx; pop edi; pop ebx; ret 0x10
> 0x0047d4ac : add [edi], ecx; xchg eax, ebp; ret
> 0x004456d4 : add [ebx + 0x450ffce], ecx; pop esi; ret
> 0x004024c5 : add [eax], edx; add [eax], al; ret
> 0x004529e4 : add [edx], ebp; call [eax + 0x98]; ret
> 0x0042383a : adc [edx], eax; add [edi + 0x5e], bl; ret
> 0x0043c30e : add [edx + 1], ebp; call [eax + 4]; ret
> 0x0048220d : adc [ebp + 0x5152bc55], ecx; call eax
> 0x00406a5c : adc [esi], eax; add [ebx + 0x5e5f04c4], al; pop ebx; ret
> 0x0047f651 : add [esi + 0x2b10], eax; xor eax, eax; pop esi; pop ebp; ret 0x1c
> 0x00462805 : add [esi + 0x14], edi; mov eax, edi; pop edi; pop esi; ret 8
> 0x00443dd5 : add [ebx], esi; dec [ebx + 0x7c94e8c7]; add al, [eax]; ret 0xc
> 0x0046df2e : add [eax + 0x754e4111], ecx; neg [edi + 0x5e]; pop ebp; pop ebx; ret
> 0x0045df67 : add [ebx + 0x57], edx; call [eax + 4]
> 0x0044a0fc : adc [eax + 0x50], edx; push edi; push [ebp - 4]; call esi
> 0x0045eb78 : adc [ebx + 0x505030c0], eax; push ecx; call [edx + 0x1c]
> 0x0042f4d2 : add [eax + 5], ebp; add [eax], 0; push edx; call ebp
> 0x0044e5fb : adc [ecx], eax; add [eax], al; push [edi + 0x20]; call esi
> 0x00455d18 : adc [esi + 0x50], edx; push [ebp + 0xc]; call [edx + 4]
> 0x00402490 : add [eax + eax], edi; add bh, al; add dl, [esi - 0x39000000]; add [eax], dl; add [eax], al; ret