ropshell> use b921fb870c9ac0d509b2ccabbbbe95f3 (download)
name         : kernel32.dll (i386/PE)
base address : 0x7c801000
total gadgets: 8249

ropshell> suggest "load mem"
> 0x7c83541b : mov eax, [ebp + 0x10]; pop ebp; ret 0xc
> 0x7c82cc3b : mov eax, [ebx]; push eax; call edi
> 0x7c80b3bc : mov eax, [esi]; push eax; call edi
> 0x7c86b75d : movsx eax, [edi]; push eax; call esi
> 0x7c86b7c8 : movsx eax, [edi + 1]; push eax; call esi
> 0x7c861bba : mov ecx, [ebp + 0xc]; mov [ecx], eax; pop ebp; ret 8
> 0x7c857f25 : mov esi, [ebp + 0x10]; push esi; call ebx
> 0x7c85858e : mov edi, [ebp + 8]; push edi; call ebx
> 0x7c80934f : mov eax, [edx]; mul [edx + 4]; shrd eax, edx, 0x18; ret
> 0x7c86839d : movzx eax, [esi + 0x90]; push eax; push ebx; call edi
> 0x7c81078c : mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c80f82d : mov ebp, [edx + eax]; mov [edi], esi; mov al, 1; pop edi; pop esi; pop ebp; ret 0xc
> 0x7c829893 : movzx ecx, [eax]; push ecx; push [eax + 4]; push [esi + 0x5c]; call ebx
> 0x7c86d758 : mov esi, [edx]; mov esi, [esi]; mov [edx], esi; add eax, ecx; pop esi; pop ebp; ret 0x14
> 0x7c810786 : mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c82bdb0 : mov ecx, [esi + 4]; xor eax, eax; push esi; push ecx; push eax; call [ebp + 8]
> 0x7c8560a4 : mov edx, [eax + 4]; add [edx], ecx; sub [eax + 8], ecx; add [eax], ecx; pop ebp; ret 0xc
> 0x7c810780 : mov ebp, [eax + 0xc8]; mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c81077a : mov esi, [eax + 0xb4]; mov ebp, [eax + 0xc8]; mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx
> 0x7c810774 : mov edi, [eax + 0xb0]; mov esi, [eax + 0xb4]; mov ebp, [eax + 0xc8]; mov ebx, [eax + 0xb8]; mov ecx, [eax + 0xcc]; mov esp, [eax + 0xd8]; jmp ecx