ropshell> use 9042649d1f5489ba94a85363efd26e22 (download)
name         : ntdll.dll (i386/PE)
base address : 0x4b281000
total gadgets: 11260

ropshell> suggest
call
    > 0x4b2a0936 : call eax
    > 0x4b2abef3 : call ebx
    > 0x4b2b5339 : call ecx
    > 0x4b2a208e : call edx
    > 0x4b2a6a10 : call esi
jmp
    > 0x4b29c0e8 : push esp; ret
    > 0x4b2a2f0d : jmp eax
    > 0x4b298a84 : jmp ebx
    > 0x4b2f27c5 : jmp ecx
    > 0x4b2e1bc3 : jmp esi
load mem
    > 0x4b29fb65 : mov edx, [ebx]; ret
    > 0x4b29c4f0 : mov ebp, [eax]; ret
    > 0x4b2f89a4 : mov eax, [edx + 4]; ret
    > 0x4b3618aa : mov eax, [esi + 0x20]; pop esi; ret
    > 0x4b2f45cd : mov eax, [ebp + 0x10]; pop ebp; ret
load reg
    > 0x4b2ebdf2 : pop eax; ret
    > 0x4b2a915b : pop ebx; ret
    > 0x4b29e0b1 : pop ecx; ret
    > 0x4b29ea59 : pop edx; ret
    > 0x4b2a7abc : pop esi; ret
pop pop ret
    > 0x4b2ebdf2 : pop eax; ret
    > 0x4b2f56b2 : pop eax; pop ebp; ret
    > 0x4b2fd542 : pop eax; pop esi; pop ebp; ret
    > 0x4b2f564c : pop eax; pop edi; pop esi; pop ebp; ret
    > 0x4b2fdcaf : pop eax; pop edi; pop esi; pop ebx; pop ebp; ret
sp lifting
    > 0x4b2f3727 : add esp, 0x14; ret
    > 0x4b2f3727 : add esp, 0x14; ret
stack pivoting
    > 0x4b2bb24d : xchg eax, esp; ret
    > 0x4b2ad944 : mov esp, ebx; pop ebx; ret
    > 0x4b2a6a8e : mov esp, ebp; pop ebp; ret
    > 0x4b304f28 : lea esp, [esp + 0x80]; pop ecx; ret
    > 0x4b2f0466 : mov esp, esi; pop ebx; pop edi; pop esi; pop ebp; ret 0x10
write mem
    > 0x4b2a80b5 : add [ebx], eax; ret
    > 0x4b2ff4a1 : add [ebx], edi; ret
    > 0x4b2b1964 : add [ecx], eax; pop edi; ret
    > 0x4b29ef65 : adc [edx], ebp; lahf ; ret
    > 0x4b2e8ded : add [eax + 0x5dc03308], ecx; ret 0xc