ropshell> use bf27cb0e70701b1211030c01e1063174 (download)
name         : ntdll.dll (i386/PE)
base address : 0x6a201000
total gadgets: 11361

ropshell> suggest "write mem"
> 0x6a264f8c : add [ebx], eax; ret
> 0x6a23825f : add [ebx], edi; ret
> 0x6a228042 : add [ecx], eax; pop edi; ret
> 0x6a219de5 : adc [edx], ebp; lahf ; ret
> 0x6a279c0d : add [eax + 0x5dc03308], ecx; ret 0xc
> 0x6a30346a : add [eax + 0x3b217501], ebp; ret
> 0x6a24a795 : add [ebx + 0x175fce0], eax; ret
> 0x6a2a209e : adc [ebx + 0x33f703c7], ecx; ret
> 0x6a2d9435 : add [edx + 0x2b], ebx; ret
> 0x6a2936d7 : add [esi + 0x5b], ebx; ret
> 0x6a228d8c : add [edi + 0x5d], ebx; ret 8
> 0x6a21da1e : adc [edi + 0x16], esi; ret
> 0x6a28746e : add [edi], ecx; test [ebp - 0x9fffc08], ebx; ret
> 0x6a24cbfb : adc [esi + 4], eax; add cl, cl; ret 0xc
> 0x6a26c7eb : add [ebp + 0x5e5f1846], ecx; pop ebx; pop ebp; ret 0x18
> 0x6a23ace8 : add [ebp + 5], esi; pop esi; pop ebp; ret 4
> 0x6a227733 : add [ecx + 0x1400e3], eax; add [ebx], cl; ret
> 0x6a23d241 : add [edx + 0x5b0b2444], ecx; mov esp, ebp; pop ebp; ret 0x10
> 0x6a29592f : adc [edi + 0x50], edx; call esi
> 0x6a27cce9 : add [esi], eax; pop edi; mov eax, edx; pop esi; pop ebp; ret 8
> 0x6a2e7ad6 : add [edi + 0x10], eax; xor eax, eax; pop edi; pop esi; ret
> 0x6a2e2257 : add [edi], esi; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 8
> 0x6a2822ab : add [esi], ebp; xor [eax + 0x5e03325c], cl; mov eax, ebx; pop ebx; pop ebp; ret 4
> 0x6a23de62 : adc [edi], eax; add [edi + 0x5e], bl; pop ebx; mov esp, ebp; pop ebp; ret 4
> 0x6a2edd48 : add [eax], ebx; add [ebp + 0x2a], esi; xor al, al; pop edi; pop esi; pop ebp; ret 8
> 0x6a265c72 : add [ebx], esi; rcr [ebp - 0x3e], 8; add [ebx - 0x3fccf3b3], cl; mov [ecx], eax; pop ebp; ret 8
> 0x6a2e7a7f : adc [ebx + 9], esi; mov eax, [ebp + 8]; mov [edx], eax; add [ecx + 4], 4; xor eax, eax; pop ebp; ret 8
> 0x6a2445bb : adc [edx + eax], ebp; add [ecx + 0x5fe93446], cl; add al, 0; add [ebp - 0xdb7b], cl; call [eax - 0x18]
> 0x6a23aa3f : adc [edi], ebp; pop es; add [edi + 0x5e], bl; pop ebx; ret