ropshell> use 13f6e93ae581129e5dbc1d4126de3767 (download)
name         : libspp.dll (i386/PE)
base address : 0x10001000
total gadgets: 37331

ropshell> suggest "write mem"
> 0x100110e6 : add [eax], edx; ret
> 0x100ef1bd : adc [ebx], edi; ret
> 0x1014c632 : add [eax + 1], edi; ret
> 0x10063f62 : add [ebx + 0x3b102444], ecx; ret
> 0x10004a9d : add [ecx + 0x3a], eax; ret
> 0x100ddda5 : add [edx + 0x3a410141], ecx; ret
> 0x1000fc6b : adc [esi + 0x48], ebx; ret
> 0x10026012 : adc [ebx], edx; add dh, dh; ret
> 0x100da4e9 : add [ebx], esi; idiv [edx]; ret
> 0x100bc50f : add [ecx], eax; add dh, dh; ret
> 0x100cfe6f : add [edi], ebx; adc al, ch; ret
> 0x100252bb : add [ebp], esi; add dh, dh; ret
> 0x10012de4 : add [edx], ebp; call esi
> 0x100dc66c : add [edi], ecx; test [ebp - 0xa000000], edx; ret
> 0x100988b5 : add [edx + 1], ebp; call [eax]; ret
> 0x100a5f82 : adc [ebx], ecx; add [ebx - 0x3974fb3c], al; pop esi; ret 4
> 0x1009e354 : adc [eax + 0x57], edx; call esi
> 0x10005531 : add [edx + 0x4c48300], ebx; mov eax, esi; pop esi; ret 4
> 0x1011bfad : add [esi + 0xa], edx; add [eax], al; ret 0x18
> 0x1014d7bb : add [edx], ebx; add [ebx - 0x3fcceb3c], al; pop edi; pop esi; ret
> 0x10045d21 : adc [ecx + edx], edx; add [ebx - 0x3974fb3c], al; pop esi; ret 4
> 0x1010f831 : add [ecx + 4], edi; add [ebx - 0x3974fb3c], al; pop esi; ret 4
> 0x100bf731 : add [edx + 9], edi; add [ebx - 0x3974fb3c], al; pop esi; ret 4
> 0x100ae15c : adc [edi + 0x5e], ebx; pop ebp; pop ebx; add esp, 0x2424; ret 0xc
> 0x10112c31 : add [ebp + 4], eax; add [ebx - 0x3974fb3c], al; pop esi; ret 4
> 0x10061c21 : adc [ebp + 0xf], edx; add [ebx - 0x3974fb3c], al; pop esi; ret 4
> 0x101236a2 : add [ebp + 7], esi; pop edi; xor eax, eax; pop esi; ret 4
> 0x100bef9b : adc [eax], ecx; cmc ; call [eax - 0x75]
> 0x100d1521 : adc [eax + ecx], ebx; add esp, 4; mov eax, esi; pop esi; ret 4
> 0x10096356 : adc [eax + eax], ecx; add esp, 8; call eax
> 0x1001c578 : add [ebx + 0x50], edx; call [edx + 0x2c]
> 0x10034ef2 : adc [ebp + 0x50002444], ecx; call [edx + 0x18]
> 0x10093c25 : adc [ecx], edi; or al, 0; add esp, 8; call eax
> 0x10123931 : add [eax], edi; add eax, [eax]; add esp, 4; mov eax, esi; pop esi; ret 4
> 0x10044921 : adc [eax], ebp; adc [eax], eax; add esp, 4; mov eax, esi; pop esi; ret 4
> 0x1014c84e : add [ebx], eax; add [eax], al; add bl, al; xor eax, eax; pop esi; ret
> 0x100a6721 : adc [edx], ecx; or eax, [eax]; add esp, 4; mov eax, esi; pop esi; ret 4
> 0x100a4321 : adc [esi], ebp; or eax, [eax]; add esp, 4; mov eax, esi; pop esi; ret 4
> 0x1013f8bf : add [eax], esi; add [eax], al; add [ecx - 0x3fcca2e8], cl; pop ebx; add esp, 0xe0; ret
> 0x1013f731 : add [ecx], esi; add [eax], al; add [ecx - 0x3fcca2e8], cl; pop ebx; add esp, 0xe0; ret
> 0x1013f856 : add [edx], edi; add [eax], al; add [ecx - 0x3fcca2e8], cl; pop ebx; add esp, 0xe0; ret
> 0x1013049e : add [edi + 0xb], esi; mov ecx, [esp + 4]; mov [ecx + 0x19a], ax; ret
> 0x10125bf2 : add [esi + 0xe], edi; xor eax, eax; push 8; mov al, [esi]; push eax; call ebx
> 0x10089ab9 : adc [edi + 0x50], edx; mov eax, [esp + 0x64]; push eax; call [edx + 8]
> 0x10012a73 : adc [eax + 0xa], ebp; push es; add [eax], al; push eax; call [edx + 8]
> 0x100db152 : add [ebx + 0xa6808c2], eax; push es; add [eax], al; push edx; call [eax + 8]
> 0x1008bf51 : add [ecx], ebp; xchg [ecx], eax; add [eax + ecx - 0x75], dh; pop ss; push 1; mov ecx, edi; call [edx]