ropshell> use 9042649d1f5489ba94a85363efd26e22 (download)
name         : ntdll.dll (i386/PE)
base address : 0x4b281000
total gadgets: 11260

ropshell> suggest "write mem"
> 0x4b2a80b5 : add [ebx], eax; ret
> 0x4b2ff4a1 : add [ebx], edi; ret
> 0x4b2b1964 : add [ecx], eax; pop edi; ret
> 0x4b29ef65 : adc [edx], ebp; lahf ; ret
> 0x4b2e8ded : add [eax + 0x5dc03308], ecx; ret 0xc
> 0x4b386e51 : add [eax + 0x3b217501], ebp; ret
> 0x4b2d8e67 : add [ebx + 0x175fce0], eax; ret
> 0x4b30355e : adc [ebx + 0x33f703c7], ecx; ret
> 0x4b33dcfc : add [edx + 0x2b], ebx; ret
> 0x4b2f4af7 : add [esi + 0x5b], ebx; ret
> 0x4b37a1cf : add [edi + 0x5e], ebx; ret
> 0x4b2a2b9e : adc [edi + 0x16], esi; ret
> 0x4b2bbb49 : adc [ebp + 1], esi; ret
> 0x4b2a6ba2 : add [ebp + 0x5b5e1046], ecx; pop ebp; ret 0x18
> 0x4b2adfc2 : add [edi], ecx; test [ebx - 0xa000000], esp; ret
> 0x4b381abb : add [ebx], ecx; idiv edi; mov esp, ebp; pop ebp; ret 0xc
> 0x4b2b0213 : add [ecx + 0x1400e3], eax; add [ebx], cl; ret
> 0x4b2cf05a : add [edx + 0x5b0f2444], ecx; mov esp, ebp; pop ebp; ret 0x10
> 0x4b2f6d6f : adc [edi + 0x50], edx; call esi
> 0x4b2f1b42 : add [eax], ecx; add [edx + 0x4b304ff0], bh; call edx; ret 8
> 0x4b2f1f92 : add [ebx], edx; add [edx + 0x4b304ff0], bh; call edx; ret 0x10
> 0x4b37c986 : add [ebx], esi; shr bl, 3; push 6; pop eax; pop ebp; ret 8
> 0x4b2f2072 : add [ecx], edx; add [edx + 0x4b304ff0], bh; call edx; ret 0x10
> 0x4b2f2032 : add [edx], eax; add [edx + 0x4b304ff0], bh; call edx; ret
> 0x4b2f1572 : add [edx], ecx; add [edx + 0x4b304ff0], bh; call edx; ret 0xc
> 0x4b2aacd2 : add [esi], eax; add [edi + 0x5e], bl; pop ebp; ret 8
> 0x4b2f1c62 : add [esi], ecx; add [edx + 0x4b304ff0], bh; call edx; ret 0xc
> 0x4b2f1802 : add [edi], eax; add [edx + 0x4b304ff0], bh; call edx; ret 8
> 0x4b353e96 : add [edi + 0x10], eax; xor eax, eax; pop edi; pop esi; ret
> 0x4b34b337 : add [edi], esi; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 8
> 0x4b382f22 : adc [eax], ebp; dec ebx; mov [edx], eax; xor eax, eax; inc eax; ret
> 0x4b2e08eb : add [eax + 0x4518901], esi; pop edi; pop esi; pop ebx; mov esp, ebp; pop ebp; ret
> 0x4b2a8dfa : add [esi + 4], eax; xor eax, eax; pop edi; pop esi; mov esp, ebp; pop ebp; ret 8
> 0x4b35dd87 : add [eax], ebx; add [ebp + 0x2a], esi; xor al, al; pop esi; pop ecx; pop ebp; ret 8
> 0x4b2efd79 : adc [ebp + 3], edi; add [ebp - 0x2177b], cl; call [eax - 0x73]
> 0x4b353e3f : adc [ebx + 9], esi; mov eax, [ebp + 8]; mov [edx], eax; add [ecx + 4], 4; xor eax, eax; pop ebp; ret 8