ropshell> use 8b063454f81c95209fc0900798507204 (download)
name         : OUTLMIME.DLL (i386/RAW)
base address : 0x0
total gadgets: 17388

ropshell> suggest
call
    > 0x0000273a : call eax
    > 0x00001f57 : call ebx
    > 0x00007731 : call ecx
    > 0x0000af03 : call edx
    > 0x00001cff : call esi
jmp
    > 0x0000d9d5 : jmp eax
    > 0x0002d79a : jmp ecx
    > 0x0008e946 : jmp edi
    > 0x00063d31 : jmp esp
    > 0x000665a7 : push esp; mov eax, ecx; ret
load mem
    > 0x0006fb36 : mov eax, [ecx]; ret
    > 0x0006ecd8 : mov eax, [ecx + 0x1c]; ret
    > 0x0006ab16 : mov eax, [ebp + 0x18]; pop ebp; ret 0x18
    > 0x0006049a : mov ecx, [eax]; call [ecx + 0x20]; ret 4
    > 0x0002a971 : mov esi, [eax]; call edi
load reg
    > 0x0008c505 : pop eax; ret
    > 0x000017da : pop ebx; ret
    > 0x00000c6d : pop ecx; ret
    > 0x00091d64 : pop edx; ret
    > 0x00002135 : pop esi; ret
pop pop ret
    > 0x0008c505 : pop eax; ret
    > 0x00013461 : pop ebx; pop esi; ret
    > 0x0000d13f : pop eax; pop esi; pop ebx; ret
    > 0x00005bb3 : pop ebx; pop edi; pop esi; pop ebp; ret
    > 0x00005bb2 : pop eax; pop ebx; pop edi; pop esi; pop ebp; ret
sp lifting
    > 0x0008c16b : add esp, 0x18; ret
    > 0x0008c16b : add esp, 0x18; ret
    > 0x0008dc29 : add esp, 0x20; ret
stack pivoting
    > 0x0000e529 : xchg eax, esp; ret
    > 0x00000d5c : mov esp, ebp; pop ebp; ret
    > 0x00063ca2 : lea esp, [edi + edi*8 - 1]; jmp [esi - 0x77]
    > 0x0007bee3 : push ecx; pop esp; mov [ecx + 0x60], edx; mov [ecx + 0x64], edx; ret
    > 0x00054ca8 : mov esp, ebx; add [eax], al; add [ebp - 0x74fc8b37], al; inc ecx; sbb al, 0x5d; ret 4
write mem
    > 0x00097072 : add [eax], edx; ret
    > 0x0002c45b : add [ebx], edi; ret
    > 0x00048863 : add [edi], ecx; inc ebx; ret
    > 0x0001bcf4 : add [eax + 0x2b], esi; ret
    > 0x000126a1 : add [ebx + 0x3b6602c1], eax; ret