ropshell> use ddfdc0ca6fbb9372402f9e6cb0ed1097 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x78e51000
total gadgets: 12000

ropshell> suggest "write mem"
> 0x78ecabef : add [rbx], edi; ret
> 0x78e60fb1 : add [rcx], eax; ret
> 0x78eee89e : add [rdx], rcx; ret
> 0x78eee89f : add [rdx], ecx; ret
> 0x78f149a0 : add [rdx], edi; ret
> 0x78e9d7b1 : adc [rax + 0xf], ecx; ret
> 0x78f27d1d : adc [rbx + rdi], edx; ret
> 0x78ec5bb3 : add [rcx + 0x3a], eax; ret
> 0x78ec5a93 : add [rbp + 0x3a], eax; ret
> 0x78ee1508 : add [rdi], ecx; xchg eax, esp; ret
> 0x78f27df8 : add [rbx], r13; ror [rdi], -0x7c; ret
> 0x78f27df9 : add [rbx], ebp; ror [rdi], -0x7c; ret
> 0x78f26feb : add [rcx], esi; clc ; dec [rbx - 0x74cbdba4]; ret
> 0x78e7a009 : add [rax + 1], edi; add rsp, 0x28; ret
> 0x78ef476b : add [rbp + 6], esi; mov eax, 1; ret
> 0x78ef45ea : add [r8], eax; and [rcx + 2], ax; ret
> 0x78e77483 : add [rbp + 0x88504], ecx; add [rax], al; ret
> 0x78e77482 : add [r13 + 0x88504], ecx; add [rax], al; ret
> 0x78ed4286 : add [rax], esi; clc ; jmp [rbp + 0x48]
> 0x78e7bd2c : adc [rdi], eax; add [rcx - 0x4b], al; add edi, esi; ret
> 0x78f195b5 : adc [rdx], eax; add [rax], al; call rax
> 0x78ef0a89 : add [rdx], esi; shr bl, 2; mov al, 1; add rsp, 0x48; ret
> 0x78f0f0c3 : adc [rbx + 5], esi; add [rax - 0x77], cl; and al, 0x20; call r10
> 0x78ed62db : add [rsi], eax; or [rax], eax; mov r9d, 3; mov edx, 0x38b; call rax
> 0x78ecf933 : add [rbx + 0x875ffc0], eax; mov rax, [rcx + 8]; call [rax]
> 0x78e67df3 : add [rcx + 0x48458901], esi; mov r8d, [rbx + 4]; add r8, r14; call r8
> 0x78eef99a : add [r13 + 0x3b], rax; sar [rbp - 0x30], 1; xor eax, eax; mov rbx, [rsp + 8]; ret
> 0x78ee5ccf : add [rax], ecx; add [rdx + 0x10b], bh; lea rcx, [rip + 0x80082]; call rax
> 0x78e77b40 : add [rbx + 0x2418902], ecx; movzx eax, [rdx + 4]; mov [rcx + 6], ax; xor eax, eax; ret
> 0x78ef42f4 : add [rcx], edi; add dh, [rdx + 7]; mov al, [rdx]; mov [rcx], al; xor eax, eax; ret
> 0x78efd531 : add [r11], ebp; rol [rcx - 0x77], 1; add cl, [rbx + 0x5c8b48c2]; and al, 8; mov rsi, [rsp + 0x10]; ret
> 0x78e98e83 : add [rcx + 0x18], rax; mov eax, [rcx + 0x10]; mov [rcx + rax*8 + 0x20], r8; inc [rcx + 0x10]; mov eax, edx; ret