ropshell> use 00dfcfa3da8c5e7c15e89a1a2ed510d6 (download)
name         : ntdll.dll (i386/PE)
base address : 0x4b281000
total gadgets: 12442
ropshell> suggest "write mem"
> 0x4b2a7c6d : add [ebx], eax; ret
> 0x4b2b487f : add [ebx], esi; ret
> 0x4b300de1 : add [ebx], edi; ret
> 0x4b2cba54 : add [ecx], eax; pop edi; ret
> 0x4b29e435 : adc [edx], ebp; lahf ; ret
> 0x4b2e9eed : add [eax + 0x5dc03308], ecx; ret 0xc
> 0x4b3840f5 : add [eax + 0x3b217501], ebp; ret
> 0x4b2b1493 : add [ebx + 0x3b6602c1], eax; ret
> 0x4b304e4e : adc [ebx + 0x33f703c7], ecx; ret
> 0x4b33cdb5 : add [edx + 0x2b], ebx; ret
> 0x4b2f6487 : add [esi + 0x5b], ebx; ret
> 0x4b3784da : add [edi + 0x5e], ebx; ret
> 0x4b2a206e : adc [edi + 0x16], esi; ret
> 0x4b346be7 : adc [edx], edi; dec ebx; call esi; ret
> 0x4b2ad298 : add [esi], eax; add dh, dh; ret
> 0x4b2e4e31 : add [edi], ecx; test al, dl; ret 3
> 0x4b2bec38 : add [ebp + 5], esi; pop esi; pop ebp; ret 4
> 0x4b2c9b76 : add [ecx + 0x1400e3], eax; add [ebx], cl; ret
> 0x4b2d764a : add [edx + 0x5b0f2444], ecx; mov esp, ebp; pop ebp; ret 0x10
> 0x4b2f86df : adc [edi + 0x50], edx; call esi
> 0x4b2f34d2 : add [eax], ecx; add [edx + 0x4b308e00], bh; call edx; ret 8
> 0x4b2f3602 : add [ebx], ecx; add [edx + 0x4b308e00], bh; call edx; ret 0xc
> 0x4b2f3922 : add [ebx], edx; add [edx + 0x4b308e00], bh; call edx; ret 0x10
> 0x4b2f3a02 : add [ecx], edx; add [edx + 0x4b308e00], bh; call edx; ret 0x10
> 0x4b2f39c2 : add [edx], eax; add [edx + 0x4b308e00], bh; call edx; ret
> 0x4b2f2f02 : add [edx], ecx; add [edx + 0x4b308e00], bh; call edx; ret 0xc
> 0x4b2f35f2 : add [esi], ecx; add [edx + 0x4b308e00], bh; call edx; ret 0xc
> 0x4b2f3192 : add [edi], eax; add [edx + 0x4b308e00], bh; call edx; ret 8
> 0x4b3528f6 : add [edi + 0x10], eax; xor eax, eax; pop edi; pop esi; ret
> 0x4b2e742b : add [ebp + 0x88504], ecx; add [eax], al; pop ebp; ret 4
> 0x4b34a397 : add [edi], esi; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 8
> 0x4b31f590 : add [eax + 0x738e901], esi; cld ; jmp [ebx]
> 0x4b2ec8db : adc [esi], edx; add [ebx - 0x7cffeb9a], al; adc [eax], al; pop esi; ret
> 0x4b35c918 : add [eax], ebx; add [ebp + 0x2a], esi; xor al, al; pop edi; pop esi; pop ebp; ret 8
> 0x4b2b1cd0 : add [eax], ebp; add [eax], eax; add [ebp - 0xbf7b], cl; call [eax - 1]
> 0x4b35289f : adc [ebx + 9], esi; mov eax, [ebp + 8]; mov [edx], eax; add [ecx + 4], 4; xor eax, eax; pop ebp; ret 8