ropshell> use daf4439caa84c2ca4f6e1b7b20a89f19 (download) name : ntdll.dll (x86_64/PE) base address : 0x180001000 total gadgets: 6609
ropshell> suggest "write mem" > 0x18010210f : adc [rax], r10; ret > 0x180102110 : adc [rax], edx; ret > 0x180050e2f : add [rbx], edi; ret > 0x1800a7188 : adc [rdx], eax; ret > 0x180077cc8 : add [rdi], ecx; ret > 0x180077cc7 : add [r15], ecx; ret > 0x1800bc8e6 : add [rax + 0x40e9084b], ecx; ret > 0x18007770a : add [rax + 1], edi; ret > 0x18006d266 : add [rbx + 0x27401f8], eax; ret > 0x1800a71a2 : adc [rcx + 0x10], eax; ret > 0x180055257 : adc [rdx + 0x10], ecx; ret > 0x180033bb9 : adc [rbp + 2], esi; ret > 0x180103cf3 : add [rax], ebx; bt eax, ecx; setb al; ret > 0x1800a6e23 : adc [rbx], ecx; movaps xmm[rcx - 0x10], xmm0; ret > 0x18010bf76 : add [rdx], esi; ror [rax - 0x7d], 0xc4; ret > 0x1800a719e : adc [rcx], eax; movups xmm[r9 + 0x10], xmm0; ret > 0x1800e0980 : add [rbx + 3], esi; mov [rcx], r8d; ret > 0x180070dd3 : add [rbp + 0x88504], ecx; add [rax], al; ret > 0x180070dd2 : add [r13 + 0x88504], ecx; add [rax], al; ret > 0x1800a6cf1 : add [rdx + 0xf], eax; adc [rcx + rax - 0x10], ecx; ret > 0x18001e9a7 : adc [rdx + 8], esi; cmp rdx, [r8]; setb al; ret > 0x1800fdfda : add [rbx + 0x18], rcx; mov rbx, [rsp + 8]; mov eax, r10d; ret > 0x1800fdfdb : add [rbx + 0x18], ecx; mov rbx, [rsp + 8]; mov eax, r10d; ret > 0x1800a9d7b : add [rbp + 6], ebx; add [rax + 0x30c48348], dl; pop rdi; pop rbp; pop rbx; ret > 0x1800f4fe4 : add [rcx], edi; add dh, [rdx + 8]; mov al, [rdx]; mov [rcx], al; xor eax, eax; ret > 0x18007e31c : add [rbx], ebp; rol [rcx - 0x77], 1; add cl, [rbx + 0x5c8b48c2]; and al, 8; mov rsi, [rsp + 0x10]; ret > 0x18007e31b : add [r11], ebp; rol [rcx - 0x77], 1; add cl, [rbx + 0x5c8b48c2]; and al, 8; mov rsi, [rsp + 0x10]; ret > 0x180074b4b : add [rcx + 0x18], rax; mov eax, [rcx + 0x10]; mov [rcx + rax*8 + 0x20], r8; mov eax, edx; inc [rcx + 0x10]; ret