ropshell> use d924c371dec38ef931be57fae9b57aae (download)
name         : ntdll.dll (i386/PE)
base address : 0x6a201000
total gadgets: 9150

ropshell> suggest "write mem"
> 0x6a2d59ad : adc [ebx], edi; ret
> 0x6a20535c : add [ecx], eax; ret
> 0x6a2096d5 : adc [edx], ebp; lahf ; ret
> 0x6a255306 : add [eax + 0x5dc03308], ecx; ret 0x10
> 0x6a217cbb : add [ebx + 0x175fce0], eax; ret
> 0x6a27d27e : adc [ebx + 0x33f703c7], ecx; ret
> 0x6a26ecd7 : add [esi + 0x5b], ebx; ret
> 0x6a25a57d : adc [edi + 0x5e], ebx; ret
> 0x6a20d30e : adc [edi + 0x16], esi; ret
> 0x6a23df79 : add [ebp + 0x4c8b4204], ecx; ret
> 0x6a213e8e : add [edi], ecx; xchg eax, esp; ret
> 0x6a25ab33 : adc [esi], ebp; add al, [eax]; ret 0x1c
> 0x6a2289f8 : adc [ebp + 5], esi; pop esi; pop ebp; ret 4
> 0x6a266acb : add [eax + eax], ebx; mov esp, ebp; pop ebp; ret
> 0x6a22bbbe : add [edx + 0x5b0b2444], ecx; mov esp, ebp; pop ebp; ret 0x10
> 0x6a24093f : add [ebx], eax; add [ebx - 0x3974f33c], al; pop edi; pop esi; ret
> 0x6a2577d1 : add [esi], eax; pop edi; mov eax, edx; pop esi; pop ebp; ret 8
> 0x6a28cbd4 : adc [ecx], edi; stc ; call [eax + 0x57]
> 0x6a2213fd : add [edx], ecx; add [eax], eax; mov esp, ebp; pop ebp; ret 0x10
> 0x6a2bc877 : add [edi], esi; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 8
> 0x6a2e5bc1 : add [esi + 0x5f], eax; mov eax, esi; pop esi; pop ebx; pop ebp; ret 4
> 0x6a259acb : adc [eax + 1], esi; add [ebx - 0x3874f33c], al; pop edi; pop esi; mov esp, ebp; pop ebp; ret
> 0x6a2c200f : adc [ebx + 9], esi; mov eax, [ebp + 8]; mov [edx], eax; add [ecx + 4], 4; xor eax, eax; pop ebp; ret 8