ropshell> use 911ddf2e16761643a47225f654d811e5 (download) name : ntdll.dll (i386/PE) base address : 0x7c901000 total gadgets: 6968
ropshell> search mov$ eax ? found 8 gadgets > 0x7c9149d9 : mov eax, 0x115; ret > 0x7c936988 : mov eax, 0x7c97ff; ret > 0x7c90e270 : mov eax, 1; ret > 0x7c90ea76 : mov eax, 3; ret > 0x7c90e264 : mov eax, 7; ret > 0x7c9604fc : mov eax, eax; ret > 0x7c93d8d6 : mov eax, ecx; ret > 0x7c901726 : mov eax, edx; ret