ropshell> use 3891413139eaabfefe9b0ca49b5cd395 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x77be1000
total gadgets: 3854

ropshell> suggest "write mem"
> 0x77c0a77e : add [ebx], eax; ret
> 0x77c23bc1 : add [eax + 0x5d], ebx; ret
> 0x77c0231b : add [eax + 0x3a414606], ecx; ret
> 0x77bec048 : add [ebx + 0x5d5e5fc6], ecx; ret
> 0x77bfa15d : add [esi + 0x5d], ebx; ret
> 0x77c08e27 : adc [esi + 0x19a8a377], edi; ret
> 0x77be8f98 : adc [ebx], edx; mov bh, 6; ret
> 0x77c0757b : add [edx], ebp; call esi
> 0x77c1bbc7 : add [ebx + 0x754a04c0], eax; cmc ; pop esi; pop ebp; ret
> 0x77c07533 : add [ebp + 4], esi; call esi
> 0x77c266b6 : add [ecx], eax; add [edx + 0x5e77c25a], cl; pop edx; ret 0x77
> 0x77c1acab : add [esi + 0x1c], eax; mov eax, esi; pop esi; pop ebp; ret
> 0x77c09988 : add [edi], ecx; xchg eax, esp; ror [ecx + 0x34a1fc45], 0x1a; ret
> 0x77c23f33 : add [edx + 2], ebp; pop eax; pop edi; pop esi; pop ebx; pop ebp; ret
> 0x77c0030b : adc [ecx], esi; add [ebx + 0x1d3b085d], cl; and [0], ah; ret
> 0x77c0a6fb : add [ebx], esi; inc [edi + 0x33]; shr bl, cl; add eax, [ebx]; ret
> 0x77c26e13 : add [edi + 0x48], esi; movzx eax, [edi + 0x77c27695]; jmp [0]