ropshell> use 6886a7d522b453a57f0a69191236326b (download) name : ntdll.dll (x86_64/PE) base address : 0x180001000 total gadgets: 6630
ropshell> suggest "write mem" > 0x180101e0f : adc [rax], r10; ret > 0x180101e10 : adc [rax], edx; ret > 0x18005094f : add [rbx], edi; ret > 0x1800a63c8 : adc [rdx], eax; ret > 0x1800777b8 : add [rdi], ecx; ret > 0x1800777b7 : add [r15], ecx; ret > 0x180030029 : add [rax + 0xf], ecx; ret > 0x1800771fa : add [rax + 1], edi; ret > 0x18006cd96 : add [rbx + 0x27401f8], eax; ret > 0x1800a63e2 : adc [rcx + 0x10], eax; ret > 0x180054d87 : adc [rdx + 0x10], ecx; ret > 0x1800336d9 : adc [rbp + 2], esi; ret > 0x1801039f3 : add [rax], ebx; bt eax, ecx; setb al; ret > 0x1800a6063 : adc [rbx], ecx; movaps xmm[rcx - 0x10], xmm0; ret > 0x18010bc76 : add [rdx], esi; ror [rax - 0x7d], 0xc4; ret > 0x180048cb5 : add [rbp + 0xff01a0c], ecx; mov cl, 0xd; ret > 0x1800a63de : adc [rcx], eax; movups xmm[r9 + 0x10], xmm0; ret > 0x1800e0680 : add [rbx + 3], esi; mov [rcx], r8d; ret > 0x180070902 : add [r13 + 0x88504], ecx; add [rax], al; ret > 0x1800a5f31 : add [rdx + 0xf], eax; adc [rcx + rax - 0x10], ecx; ret > 0x18001e5a7 : adc [rdx + 8], esi; cmp rdx, [r8]; setb al; ret > 0x1800fdcda : add [rbx + 0x18], rcx; mov rbx, [rsp + 8]; mov eax, r10d; ret > 0x1800fdcdb : add [rbx + 0x18], ecx; mov rbx, [rsp + 8]; mov eax, r10d; ret > 0x1800f4ce4 : add [rcx], edi; add dh, [rdx + 8]; mov al, [rdx]; mov [rcx], al; xor eax, eax; ret > 0x18007de0c : add [rbx], ebp; rol [rcx - 0x77], 1; add cl, [rbx + 0x5c8b48c2]; and al, 8; mov rsi, [rsp + 0x10]; ret > 0x18007de0b : add [r11], ebp; rol [rcx - 0x77], 1; add cl, [rbx + 0x5c8b48c2]; and al, 8; mov rsi, [rsp + 0x10]; ret > 0x18007463b : add [rcx + 0x18], rax; mov eax, [rcx + 0x10]; mov [rcx + rax*8 + 0x20], r8; mov eax, edx; inc [rcx + 0x10]; ret