ropshell> use 2e92b666a7cc8af174d4445be8fdb0ed (download)
name         : ntdll.dll (i386/PE)
base address : 0x77ec1000
total gadgets: 10918

ropshell> suggest "write mem"
> 0x77ece785 : add [ebx], edi; ret
> 0x77eebf97 : add [edx], edi; ret
> 0x77f28a6c : add [edx], eax; pop ebp; ret
> 0x77eeba2b : add [eax + 0x5d5e5f01], esi; ret 8
> 0x77f235e8 : add [eax + 0x1069], edi; ret
> 0x77ecb35e : adc [ebx + 0x33f703c7], ecx; ret
> 0x77ef39a7 : add [esi + 0x5b], ebx; ret
> 0x77f5cc26 : add [eax + 0xb0], ecx; pop ebp; ret 8
> 0x77f8e3d0 : add [ebx + 0xa8902c1], eax; pop ebp; ret
> 0x77f3806b : add [edi + 0x5e], ebx; pop ebp; ret 0x10
> 0x77f83a1d : add [edi], ecx; pop edi; pop esi; pop ebp; ret 0xc
> 0x77f299a6 : add [edi], esi; pop edi; pop esi; pop ebp; ret 0x10
> 0x77f899ab : adc [ebx], esi; rcr [edi + 0x5e], 0x5d; ret
> 0x77f18ddb : add [ecx], eax; xor eax, eax; pop edi; pop ebp; ret 8
> 0x77f6e89b : add [esi], edi; xor eax, eax; pop edi; pop esi; pop ebp; ret 8
> 0x77ee5256 : add [esi + 4], eax; xor eax, eax; pop esi; pop ebp; ret 8
> 0x77f17cce : add [ebp + 0x88504], ecx; add [eax], al; pop ebp; ret 4
> 0x77ee0e5b : adc [edi], eax; add [ebx + 0x57e8e445], cl; pop edx; add al, [eax]; ret 0x18
> 0x77ed76ca : adc [ebx + 0x6a], edx; add [ebp - 0x2037b], cl; call [eax + 0x6a]
> 0x77ee22d8 : add [eax], ebp; add al, [eax]; add [ebp - 0xe37b], cl; call [eax - 1]
> 0x77f7935b : add [eax + 5], ebp; add [edi], cl; add [ebp - 0x20f7b], cl; call [eax - 0x18]
> 0x77f2520d : add [ecx + 0xc], eax; mov esi, [ecx + 8]; mov [ecx + esi*4 + 0x10], edx; inc [ecx + 8]; pop esi; pop ebp; ret 0xc