ropshell> use 4329ee7d502c9113eba0f9570392f5ee (download)
name         : hal.dll (i386/PE)
base address : 0x80010400
total gadgets: 963

ropshell> suggest "write mem"
> 0x8001625b : add [eax + 0x5d], ebx; ret 0x10
> 0x800180d9 : add [esi + 0x5d], ebx; ret 0xc
> 0x8001597c : add [ebx + 0x74c30bc7], ecx; or bh, dh; ret 0
> 0x800162a7 : adc [eax], ebp; add [eax], al; xor eax, eax; inc eax; pop ebp; ret 0x10
> 0x80012a17 : adc [ebx + 0x77500fa], eax; or ecx, 2; mov [eax + 4], ecx; ret
> 0x800129be : adc [ebp + 0xa], esi; pop edx; mov eax, 1; mov [ecx + 0x1c], dl; ret