ropshell> use 00dfcfa3da8c5e7c15e89a1a2ed510d6 (download)
name         : ntdll.dll (x86_64/RAW)
base address : 0x0
total gadgets: 12489
ropshell> suggest "write mem"
> 0x0007370e : add [rax], r8; ret 8
> 0x0002706d : add [rbx], eax; ret
> 0x00033c7f : add [rbx], esi; ret
> 0x000801e1 : add [rbx], edi; ret
> 0x0004ae54 : add [rcx], eax; pop rdi; ret
> 0x000c5fe7 : adc [rdx], edi; call r14; ret
> 0x0001d835 : adc [rdx], ebp; lahf ; ret
> 0x000692ed : add [rax + 0x5dc03308], ecx; ret 0xc
> 0x001034f5 : add [rax + 0x3b217501], ebp; ret
> 0x00030893 : add [rbx + 0x3b6602c1], eax; ret
> 0x0008424e : adc [rbx + 0x33f703c7], ecx; ret
> 0x000bc1b5 : add [rdx + 0x2b], ebx; ret
> 0x00075887 : add [rsi + 0x5b], ebx; ret
> 0x000f78da : add [rdi + 0x5e], ebx; ret
> 0x0002146e : adc [rdi + 0x16], esi; ret
> 0x0002c698 : add [rsi], eax; add dh, dh; ret
> 0x00064231 : add [rdi], ecx; test al, dl; ret 3
> 0x0005b35b : add [rdi], rcx; test [rbx - 0x9fffbe9], ebx; ret
> 0x000b0c12 : add [r8], rax; add [rax], al; ret
> 0x0003e038 : add [rbp + 5], esi; pop rsi; pop rbp; ret 4
> 0x000c1e4e : add [rbx + 0x8880c45], rcx; mov al, 1; pop rbp; ret 8
> 0x00048f76 : add [rcx + 0x1400e3], eax; add [rbx], cl; ret
> 0x00056a4a : add [rdx + 0x5b0f2444], ecx; mov esp, ebp; pop rbp; ret 0x10
> 0x00077adf : adc [rdi + 0x50], edx; call rsi
> 0x00048f75 : add [r9 + 0x1400e3], eax; add [rbx], cl; ret
> 0x000728d2 : add [rax], ecx; add [rdx + 0x4b308e00], bh; call rdx; ret 8
> 0x00072a02 : add [rbx], ecx; add [rdx + 0x4b308e00], bh; call rdx; ret 0xc
> 0x00072d22 : add [rbx], edx; add [rdx + 0x4b308e00], bh; call rdx; ret 0x10
> 0x00072e02 : add [rcx], edx; add [rdx + 0x4b308e00], bh; call rdx; ret 0x10
> 0x00072dc2 : add [rdx], eax; add [rdx + 0x4b308e00], bh; call rdx; ret
> 0x00072302 : add [rdx], ecx; add [rdx + 0x4b308e00], bh; call rdx; ret 0xc
> 0x000729f2 : add [rsi], ecx; add [rdx + 0x4b308e00], bh; call rdx; ret 0xc
> 0x00072592 : add [rdi], eax; add [rdx + 0x4b308e00], bh; call rdx; ret 8
> 0x00072631 : add [r8], eax; add [rdx + 0x4b308e00], bh; call rdx; ret 0x14
> 0x00072891 : add [ebx], eax; add [rdx + 0x4b308e00], bh; call rdx; ret 4
> 0x000d1cf6 : add [rdi + 0x10], eax; xor eax, eax; pop rdi; pop rsi; ret
> 0x0006682b : add [rbp + 0x88504], ecx; add [rax], al; pop rbp; ret 4
> 0x000c9797 : add [rdi], esi; xor eax, eax; pop rdi; pop rsi; pop rbx; pop rbp; ret 8
> 0x0009e990 : add [rax + 0x738e901], esi; cld ; jmp [rbx]
> 0x0006bcdb : adc [rsi], edx; add [rbx - 0x7cffeb9a], al; adc [rax], al; pop rsi; ret
> 0x000dbd18 : add [rax], ebx; add [rbp + 0x2a], esi; xor al, al; pop rdi; pop rsi; pop rbp; ret 8
> 0x0009a2b8 : add [rax + 0x57], edx; call [rip + 0x4b3a11e0]; call [rbp - 4]
> 0x000310d0 : add [rax], ebp; add [rax], eax; add [rbp - 0xbf7b], cl; call [rax - 1]
> 0x000a4ede : add [r15], rcx; test [rsi + rbx*2], al; cld ; call [rdi + 0x68]
> 0x0009a2b6 : add [rdx + 1], ebp; push rax; push rdi; call [rip + 0x4b3a11e0]; call [rbp - 4]
> 0x000d1c9f : adc [rbx + 9], esi; mov eax, [rbp + 8]; mov [rdx], eax; add [rcx + 4], 4; xor eax, eax; pop rbp; ret 8