ropshell> use 3821bd26a6940981694e4a261e659323 (download)
name         : kernel32.dll (i386/PE)
base address : 0x6b810000
total gadgets: 3925

ropshell> suggest "write mem"
> 0x6b8327c3 : add [ebx], eax; ret
> 0x6b8215f8 : add [ebx], ecx; ret
> 0x6b82a973 : add [ebx], edi; ret
> 0x6b84568c : adc [eax + 0x5de58b6b], ecx; ret
> 0x6b8119d8 : add [ebx + 0x3b6602c1], eax; ret
> 0x6b849872 : add [ebx + 0x5d5e5fc7], ecx; ret 4
> 0x6b84c0d2 : add [edi + 0x5d], ebx; ret 4
> 0x6b84a9ca : add [ebp + 0x5e5f1d46], ecx; pop ebp; ret 4
> 0x6b822c81 : add [ecx + 0x14], eax; xor eax, eax; pop ebp; ret 8
> 0x6b8617f1 : add [edi], ecx; xchg eax, esp; ror [ecx - 0x1a74a1f2], 0x5d; ret 4
> 0x6b81bfeb : add [edx + 0xde8ca], ecx; add [eax], al; pop ebp; ret 4
> 0x6b8550ad : add [esi + 0x5f], ebx; pop ebx; mov esp, ebp; pop ebp; ret
> 0x6b856851 : add [ebx], edx; pop edi; pop esi; pop ebx; mov esp, ebp; pop ebp; ret 4
> 0x6b856797 : add [edi], edx; pop edi; pop esi; pop ebx; mov esp, ebp; pop ebp; ret 4
> 0x6b849ae9 : add [edi], eax; mov eax, edi; pop edi; pop esi; mov esp, ebp; pop ebp; ret 8
> 0x6b856850 : adc [ecx], eax; adc ebx, [edi + 0x5e]; pop ebx; mov esp, ebp; pop ebp; ret 4
> 0x6b8711cd : add [edx], eax; add [ebp - 0x21b7b], cl; call [eax - 1]
> 0x6b85da3c : add [esi + 0x5f], eax; mov eax, esi; pop esi; pop ebx; mov esp, ebp; pop ebp; ret 8
> 0x6b812b3f : add [eax + 0x19], ebp; add [edx], al; add [eax + 0x40], ch; inc eax; mov [ebx + 0x6a], ch; add [ebp - 0x2bb7b], cl; call [eax - 1]