ropshell> use 5081e2ba40b2df97f193382b0212d17a (download)
name         : binkw32.dll (i386/PE)
base address : 0x10001000
total gadgets: 2597

ropshell> suggest "write mem"
> 0x1001a779 : add [eax], edx; ret 4
> 0x100139d2 : add [ebx], ecx; ret
> 0x10019e79 : add [ebx], edi; ret
> 0x10021398 : add [eax + 0x5d], ebx; ret
> 0x1001a943 : add [eax + 1], edi; ret 0xc
> 0x10007632 : add [ebx + 0x23182444], ecx; ret
> 0x1000981e : add [edi + 0x5e], ebx; ret 0xc
> 0x10002d8d : add [edi], ecx; test [ebx - 0x9fffff3], ebp; ret
> 0x1001feda : add [ebx + 0x754a04c0], eax; cmc ; pop esi; ret
> 0x10005c95 : add [edx + 1], ebp; call edi
> 0x10006efe : add [edx], ebp; push esi; push edi; call ebx
> 0x1001c34b : add [ebp + 0x51], edx; call [eax + 0x44]
> 0x1001c170 : add [ebx + 0x53], edx; push eax; call [edx + 0x30]
> 0x10006e20 : add [ebp + 0x5110244c], ecx; push 0; push eax; call [edx + 0x64]
> 0x10005b5c : adc [ebp + 0xf], edi; inc ebx; mov esi, 1; sub esi, ebx; push 0; call ebp