ropshell> use 3ac8886dfa5ab641417df4d3b7f5512e (download)
name         : kernel32.dll (i386/PE)
base address : 0x7c801000
total gadgets: 7863

ropshell> suggest "write mem"
> 0x7c83c872 : add [ebx], edi; ret
> 0x7c80aae7 : add [ebx], ebp; ret
> 0x7c85601c : add [eax], ecx; pop ebp; ret 0xc
> 0x7c81eee6 : add [eax + 0x5d5e5f01], esi; ret 0x10
> 0x7c81eee8 : add [edi + 0x5e], ebx; pop ebp; ret 0x10
> 0x7c8610ac : add [edx], ebp; push -1; call edi
> 0x7c866a50 : add [ebx], esi; call [edi + 0x57]
> 0x7c84e462 : adc [ecx], esi; std ; jmp [esi - 0x7f]
> 0x7c84bac2 : add [esi], edx; cld ; jmp [esi + 0xf]
> 0x7c80e19b : adc [edi + 3], edx; add [esi + 0x5d], bl; ret 4
> 0x7c845cfb : add [ebx], eax; std ; call [eax - 0x73]
> 0x7c8284d8 : add [ecx], eax; add [eax], al; add [esi - 0x37], bl; ret 0x14
> 0x7c81fd23 : adc [edi], ecx; add al, [eax]; push 3; pop eax; pop ebp; ret 0xc
> 0x7c87cb7d : add [ebp + 0x14], ecx; pop esi; mov ax, [ebp + 0x14]; pop ebp; ret 0x18
> 0x7c85bafc : add [eax], edx; add [ebp - 0x20f7b], cl; call [eax - 1]
> 0x7c856017 : add [edx], ecx; sub [eax + 8], ecx; add [eax], ecx; pop ebp; ret 0xc
> 0x7c881619 : add [ebx + 0x188084d], ecx; inc [esi + 0xc]; xor eax, eax; inc eax; pop esi; pop ebp; ret 0xc
> 0x7c82d400 : add [edx], eax; add [ebx - 0x2ab7b], cl; dec [ebx - 0x29faf7c0]; add [eax], al; add [eax - 0x73], dl; test [ebp + edi*8 - 1], eax; call [eax - 1]
> 0x7c875fef : add [ebx + 0x68], edx; add eax, [eax]; pop ds; add [ebp - 0x837b], cl; call [eax - 1]
> 0x7c8730de : add [esi + 0x68], edx; add eax, [eax]; pop ds; add [ebp - 0x837b], cl; call [eax - 1]