ropshell> use d051839a298060557fc2e44868ca8ae6 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 8395

ropshell> suggest "write mem"
> 0x18003f59d : add [rbx], edi; ret
> 0x18001d271 : add [rcx], edx; ret
> 0x18000a46d : adc [rdx], ebp; lahf ; ret
> 0x180092e23 : adc [rax + 0xf], ecx; ret
> 0x18006fffa : add [rax + 1], edi; ret
> 0x18002babd : add [rcx + 0xc], eax; ret
> 0x18000e0a6 : adc [rdi + 0x16], esi; ret
> 0x18003b679 : adc [rbp + 1], esi; ret
> 0x18011c8e9 : adc [rax], ecx; add al, dh; ret 0xd
> 0x18006da2a : add [rbx], esi; inc [rcx - 0x7c]; ret
> 0x180105dc6 : add [rcx], eax; mov al, 1; ret
> 0x180051cb4 : add [rdi], ecx; xchg eax, esp; ret
> 0x1800d58ea : add [r8], eax; and [rcx + 2], ax; ret
> 0x18005d4a3 : add [rbp + 0x88504], ecx; add [rax], al; ret
> 0x18005d4a2 : add [r13 + 0x88504], ecx; add [rax], al; ret
> 0x18002c81b : adc [r8], rax; mov rcx, r14; call rbx
> 0x1800779ee : add [rdx + 0xc0], ebx; mov rbx, [rsp + 8]; ret
> 0x1800779ed : add [r10 + 0xc0], ebx; mov rbx, [rsp + 8]; ret
> 0x1800e8e2a : add [rdx], esi; shr bl, 2; mov al, 1; add rsp, 0x48; ret
> 0x180060c25 : add [rdx + 9], esi; xor eax, eax; cmp [rcx], r8d; seta al; ret
> 0x1800309c7 : add [rdx], eax; add [rax], al; xor eax, eax; mov rbx, [rsp + 0x28]; pop r14; ret
> 0x18004c3fc : add [rbx + 0x2418902], ecx; movzx eax, [rdx + 4]; mov [rcx + 6], ax; xor eax, eax; ret
> 0x1800d7751 : add [rcx], edi; add dh, [rdx + 7]; mov al, [rdx]; mov [rcx], al; xor eax, eax; ret
> 0x1800db152 : add [rbx], ebp; rol [rcx - 0x77], 1; add cl, [rbx + 0x5c8b48c2]; and al, 8; mov rsi, [rsp + 0x10]; ret
> 0x1800db151 : add [r11], ebp; rol [rcx - 0x77], 1; add cl, [rbx + 0x5c8b48c2]; and al, 8; mov rsi, [rsp + 0x10]; ret
> 0x1800f1ec1 : add [rbx + 0x48], esi; mov ebx, [rip + 0x3cd75]; mov rcx, rbx; mov rax, [rip + 0x4f2fb]; call rax
> 0x180065c8b : add [rcx + 0x18], rax; mov eax, [rcx + 0x10]; mov [rcx + rax*8 + 0x20], r8; inc [rcx + 0x10]; mov eax, edx; ret
> 0x1800809db : add [rax], esi; lea rax, [rsi + rsi*4]; lea rcx, [rip - 0x7c6d8]; mov rbx, [rcx + rax*8 + 8]; mov rcx, rbx; mov rax, [rip + 0xc07d9]; call rax