ropshell> use 29d9638b98dea49b7739cd6d3ad26132 (download)
name         : ntdll.dll (i386/RAW)
base address : 0x0
total gadgets: 12744

ropshell> suggest "write mem"
> 0x0003d1f7 : add [ebx], esi; ret
> 0x0008281c : add [ebx], edi; ret
> 0x0008ad61 : add [ebx], ecx; fdivrp st(6); ret
> 0x0002f1ea : add [ecx], eax; pop edi; ret
> 0x0001ba45 : adc [edx], ebp; lahf ; ret
> 0x0006842b : add [eax + 0x5dc03308], ecx; ret 0x10
> 0x000384af : add [ebx + 0x3b6602c1], eax; ret
> 0x000868be : adc [ebx + 0x33f703c7], ecx; ret
> 0x000c3528 : add [edx + 0x2b], ebx; ret
> 0x00077b47 : add [esi + 0x5b], ebx; ret
> 0x000ffd13 : add [edi + 0x5e], ebx; ret
> 0x0001f67e : adc [edi + 0x16], esi; ret
> 0x00054365 : adc [edx], eax; add cl, cl; ret
> 0x00051a27 : add [edi], ecx; test [eax - 0x74fffad2], ecx; ret
> 0x0002dc83 : add [ecx + 0x1400e3], eax; add [ebx], cl; ret
> 0x0003d1bb : add [edx + 0x5b0f2444], ecx; mov esp, ebp; pop ebp; ret 0x10
> 0x0000daad : add [esi + 0xa08005], edi; ror [edi], 1; ret
> 0x0008e6eb : add [ebp + 0x458bf83c], ecx; or [ebp - 0x74fd8a40], al; ret
> 0x0007ddb2 : add [ebp + 5], esi; xor ch, ch; fsqrt ; ret
> 0x00074ab2 : add [eax], ecx; add [edx + 0x4b317310], bh; call edx; ret 8
> 0x00074332 : add [ebx], eax; add [edx + 0x4b317310], bh; call edx; ret 4
> 0x00074f02 : add [ebx], edx; add [edx + 0x4b317310], bh; call edx; ret 0x10
> 0x00074382 : add [ecx], edx; add [edx + 0x4b317310], bh; call edx; ret 0x10
> 0x000744b2 : add [edx], ecx; add [edx + 0x4b317310], bh; call edx; ret 0xc
> 0x000750a2 : add [esi], eax; add [edx + 0x4b317310], bh; call edx; ret 8
> 0x00074bd2 : add [esi], ecx; add [edx + 0x4b317310], bh; call edx; ret 0xc
> 0x00074752 : add [edi], eax; add [edx + 0x4b317310], bh; call edx; ret 8
> 0x000d971c : add [edi + 0x10], eax; xor eax, eax; pop edi; pop esi; ret
> 0x000976c6 : add [eax], edi; stc ; call [ecx - 0x73]
> 0x000d1027 : add [edi], esi; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 8
> 0x00107f35 : adc [eax], ebp; dec ebx; mov [edx], eax; xor eax, eax; inc eax; ret
> 0x00029f7b : add [ebp + 0x5e5f0001], edx; xor eax, eax; pop ebx; mov esp, ebp; pop ebp; ret 0x14
> 0x000e5f28 : add [eax], ebx; add [ebp + 0x2a], esi; xor al, al; pop edi; pop esi; pop ebp; ret 8
> 0x000d96bf : adc [ebx + 9], esi; mov eax, [ebp + 8]; mov [edx], eax; add [ecx + 4], 4; xor eax, eax; pop ebp; ret 8