ropshell> use 9042649d1f5489ba94a85363efd26e22 (download)
name         : ntdll.dll (i386/PE)
base address : 0x4b281000
total gadgets: 11260

ropshell> suggest "load reg"
> 0x4b2ebdf2 : pop eax; ret
> 0x4b2a915b : pop ebx; ret
> 0x4b29e0b1 : pop ecx; ret
> 0x4b29ea59 : pop edx; ret
> 0x4b2a7abc : pop esi; ret
> 0x4b2b1966 : pop edi; ret
> 0x4b2a2c8a : pop ebp; ret
> 0x4b281044 : pop esp; ret
> 0x4b35ffec : popal ; ret
> 0x4b2f6a4b : mov eax, [esp + 4]; ret
> 0x4b2f76f6 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x4b304e92 : mov edx, [esp + 0x1c];  cmpxchg8b [ebp]; pop ebp; pop ebx; ret 0x14
> 0x4b3048e1 : mov edi, [esp + 8]; mov ecx, [esp + 0xc]; mov eax, [esp + 0x10]; shr ecx, 2; rep stosd es:[edi], eax; pop edi; ret 0xc