ropshell> use 3ac8886dfa5ab641417df4d3b7f5512e (download)
name         : kernel32.dll (i386/PE)
base address : 0x7c801000
total gadgets: 7863

ropshell> suggest "load mem"
> 0x7c835403 : mov eax, [ebp + 0x10]; pop ebp; ret 0xc
> 0x7c82cc23 : mov eax, [ebx]; push eax; call edi
> 0x7c80b3ac : mov eax, [esi]; push eax; call edi
> 0x7c86b5fd : movsx eax, [edi]; push eax; call esi
> 0x7c86b668 : movsx eax, [edi + 1]; push eax; call esi
> 0x7c861a5a : mov ecx, [ebp + 0xc]; mov [ecx], eax; pop ebp; ret 8
> 0x7c857e95 : mov esi, [ebp + 0x10]; push esi; call ebx
> 0x7c8584fe : mov edi, [ebp + 8]; push edi; call ebx
> 0x7c809333 : mov eax, [edx]; mul [edx + 4]; shrd eax, edx, 0x18; ret
> 0x7c86823d : movzx eax, [esi + 0x90]; push eax; push ebx; call edi
> 0x7c80bb58 : mov ecx, [ebx + eax]; add eax, -2; pop esi; pop ebx; pop ebp; ret 8
> 0x7c81077c : mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c82987b : movzx ecx, [eax]; push ecx; push [eax + 4]; push [esi + 0x5c]; call ebx
> 0x7c86d636 : mov esi, [edx]; mov esi, [esi]; mov [edx], esi; add eax, ecx; pop esi; pop ebp; ret 0x14
> 0x7c810776 : mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c82bd98 : mov ecx, [esi + 4]; xor eax, eax; push esi; push ecx; push eax; call [ebp + 8]
> 0x7c856014 : mov edx, [eax + 4]; add [edx], ecx; sub [eax + 8], ecx; add [eax], ecx; pop ebp; ret 0xc
> 0x7c810770 : mov ebp, [eax + 0xc8]; mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c81076a : mov esi, [eax + 0xb4]; mov ebp, [eax + 0xc8]; mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c810764 : mov edi, [eax + 0xb0]; mov esi, [eax + 0xb4]; mov ebp, [eax + 0xc8]; mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx