ropshell> use 911ddf2e16761643a47225f654d811e5 (download) name : ntdll.dll (i386/PE) base address : 0x7c901000 total gadgets: 6968
ropshell> search mov [r32 %] r32 found many, display max 256 gadgets > 0x7c952a0e : mov [eax], ecx; ret > 0x7c9033f2 : mov [ecx], eax; ret 8 > 0x7c903046 : mov [ecx], edx; ret 0x10 > 0x7c97316b : mov [edx], ecx; ret > 0x7c92ec53 : mov [ecx], eax; pop ebp; ret 4 > 0x7c903092 : mov [ecx], esi; pop esi; ret 0x10 > 0x7c96cd4b : mov [edx], eax; pop ebp; ret 8 > 0x7c949101 : mov [ebp + 0xfffff398], eax; ret > 0x7c9232b6 : mov [ebp + 0xfffffe80], eax; ret > 0x7c95c163 : mov [eax + 4], eax; pop ebp; ret 4 > 0x7c924d07 : mov [eax], eax; pop esi; pop ebp; ret 4 > 0x7c9033d1 : mov [ebx + 0xc4], eax; pop ebx; ret 4 > 0x7c9793e3 : mov [ecx + 2], eax; pop ebp; ret 0xc > 0x7c91315e : mov [ecx + 4], eax; pop ebp; ret 8 > 0x7c9696a3 : mov [ecx], ebx; pop ebx; pop ebp; ret 0xc > 0x7c966714 : mov [ecx], ebx; pop ebx; pop ebp; ret 4 > 0x7c927ff0 : mov [ecx + 4], edx; pop ebp; ret 4 > 0x7c963b75 : mov [ecx + 4], edx; pop ebp; ret 8 > 0x7c937d77 : mov [ecx], edx; pop ebx; pop ebp; ret 4 > 0x7c963df7 : mov [ecx], esi; pop esi; pop ebp; ret 4 > 0x7c920f2a : mov [ecx], esi; pop esi; pop ebp; ret 8 > 0x7c9032d9 : mov [edx], eax; mov eax, 2; ret 0x10 > 0x7c90ea74 : mov [edx], eax; mov eax, 3; ret > 0x7c903300 : mov [edx], eax; mov eax, 3; ret 0x10 > 0x7c9223b6 : mov [eax + 8], ebx; pop ebx; pop ebp; ret 4 > 0x7c9133ee : mov [eax], edx; mov al, 1; pop ebp; ret 0xc > 0x7c929942 : mov [eax], edx; pop edi; pop esi; pop ebp; ret 0x24 > 0x7c91c044 : mov [ecx + 4], eax; pop ebx; pop ebp; ret 4 > 0x7c965094 : mov [ecx], eax; mov al, 1; pop ebp; ret 0xc > 0x7c92a19d : mov [ecx], eax; mov al, 1; pop ebp; ret 8 > 0x7c9621db : mov [ecx], eax; xor eax, eax; pop ebp; ret 0x14 > 0x7c9293b5 : mov [ecx], eax; xor eax, eax; pop ebp; ret 0xc > 0x7c91acfb : mov [ecx + 4], edx; pop esi; pop ebp; ret 0xc > 0x7c966da8 : mov [ecx + eax + 0x320], edx; pop ebp; ret 8 > 0x7c910dac : mov [ecx + 8], esi; pop esi; pop ebp; ret 4 > 0x7c9641fc : mov [ecx], esi; pop esi; pop edi; pop ebp; ret 0xc > 0x7c9301ba : mov [edx + 0x34], eax; pop edi; pop ebp; ret 0x14 > 0x7c9223e2 : mov [edx + 0x5c], eax; pop esi; pop ebp; ret 8 > 0x7c918bb4 : mov [edx + 4], eax; pop edi; pop ebp; ret 0xc > 0x7c92d35e : mov [edx], eax; mov al, 1; pop ebp; ret 0x10 > 0x7c91e27a : mov [esi], ebx; pop esi; pop ebx; pop ebp; ret 4 > 0x7c963f89 : mov [eax], ebx; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c976e07 : mov [eax + 0x10], edx; pop edi; pop esi; pop ebp; ret 0xc > 0x7c918826 : mov [eax + 6], edx; xor eax, eax; pop ebp; ret 0xc > 0x7c93a032 : mov [eax + 0xc], edi; pop edi; pop esi; pop ebx; ret 8 > 0x7c92a088 : mov [ecx + 0x14], eax; mov eax, edx; pop ebp; ret 8 > 0x7c92fb0a : mov [ecx + 2], eax; xor eax, eax; pop ebp; ret 0xc > 0x7c912e21 : mov [ecx], eax; mov al, 1; pop esi; pop ebp; ret 8 > 0x7c9188e8 : mov [ecx], eax; xor eax, eax; pop ebx; pop ebp; ret 0x2c > 0x7c9131d7 : mov [ecx], eax; xor eax, eax; pop esi; pop ebp; ret 0xc > 0x7c95d3ab : mov [ecx], eax; xor eax, eax; pop esi; pop ebp; ret 4 > 0x7c915177 : mov [ecx], eax; xor eax, eax; pop esi; pop ebp; ret 8 > 0x7c951c8f : mov [ecx + 4], edx; mov eax, ecx; pop ebp; ret 8 > 0x7c91bb98 : mov [edx], eax; add [ecx], 2; pop ebp; ret > 0x7c952d57 : mov [edx], esi; dec [ecx]; pop esi; pop ebp; ret 8 > 0x7c92f34b : mov [esi], eax; xor eax, eax; pop esi; pop ebp; ret 0xc > 0x7c91e79c : mov [esi + 0x2c], ebx; pop esi; pop ebx; pop ebp; ret 4 > 0x7c9336a2 : mov [esi], esi; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c95453b : mov [esi + 0x24], edi; pop edi; pop esi; pop ebp; ret 8 > 0x7c95937b : mov [esi], edi; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c976713 : mov [edi + 0x34], esi; pop edi; pop esi; pop ebp; ret 4 > 0x7c90e254 : mov [esp + 6], edx; fldcw [esp + 6]; ret > 0x7c921525 : mov [eax], ebx; pop esi; xor eax, eax; pop ebx; pop ebp; ret 0x10 > 0x7c92cf30 : mov [eax + 8], edx; xor eax, eax; pop esi; pop ebp; ret 0x10 > 0x7c938942 : mov [eax], edx; and [esi], 0; pop esi; pop ebp; ret 0x2c > 0x7c9749de : mov [eax], esi; pop esi; mov eax, ebx; pop ebx; pop ebp; ret 4 > 0x7c927fee : mov [ecx], eax; mov [ecx + 4], edx; pop ebp; ret 4 > 0x7c963b73 : mov [ecx], eax; mov [ecx + 4], edx; pop ebp; ret 8 > 0x7c92060b : mov [ecx], eax; xor eax, eax; pop edi; pop esi; pop ebp; ret 0xc > 0x7c95cfe1 : mov [ecx], eax; xor eax, eax; pop esi; pop ebx; pop ebp; ret 0xc > 0x7c919b15 : mov [ecx + 4], edx; mov [eax], ecx; pop ebp; ret 4 > 0x7c919b15 : mov [ecx + 4], edx; mov [eax], ecx; pop ebp; ret 4 > 0x7c927fee : mov [ecx], eax; mov [ecx + 4], edx; pop ebp; ret 4 > 0x7c963b73 : mov [ecx], eax; mov [ecx + 4], edx; pop ebp; ret 8 > 0x7c90fec9 : mov [ecx + 4], esi; xor eax, eax; pop esi; pop ebp; ret 8 > 0x7c9664ca : mov [ecx + 4], edi; pop edi; pop esi; pop ebx; pop ebp; ret 0x14 > 0x7c93ab88 : mov [esi + 0x10], edi; pop ebp; pop ebx; pop edi; pop esi; ret 8 > 0x7c91a47d : mov [esi + 0x14], edi; pop edi; pop esi; pop ebx; pop ebp; ret 0xc > 0x7c92b1a2 : mov [edi + 0xc], eax; xor eax, eax; pop edi; pop ebp; ret 4 > 0x7c926be9 : mov [edi], eax; xor eax, eax; pop edi; pop esi; pop ebp; ret 0xc > 0x7c90255d : mov [edi], edx; mov eax, [esp + 8]; pop edi; ret > 0x7c92327e : mov [eax], cx; add [esi], ebx; pop esi; pop ebx; pop ebp; ret 0x10 > 0x7c92327f : mov [eax], ecx; add [esi], ebx; pop esi; pop ebx; pop ebp; ret 0x10 > 0x7c9214e0 : mov [eax + 0x10], edx; mov [eax + 0x24], ecx; pop ebp; ret 0x14 > 0x7c9177f3 : mov [ebx], ecx; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 0xc > 0x7c91acf9 : mov [ecx], eax; mov [ecx + 4], edx; pop esi; pop ebp; ret 0xc > 0x7c920591 : mov [ecx], eax; pop edi; pop esi; mov eax, ebx; pop ebx; pop ebp; ret 0x10 > 0x7c91ea64 : mov [ecx], eax; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c974a91 : mov [ecx + 8], edx; add eax, ecx; pop edi; pop esi; pop ebp; ret 8 > 0x7c91acf9 : mov [ecx], eax; mov [ecx + 4], edx; pop esi; pop ebp; ret 0xc > 0x7c960024 : mov [ecx], edi; sub eax, edi; pop edi; pop esi; pop ebx; pop ebp; ret 0xc > 0x7c91c042 : mov [edx], eax; mov [ecx + 4], eax; pop ebx; pop ebp; ret 4 > 0x7c9301b8 : mov [edx], edx; mov [edx + 0x34], eax; pop edi; pop ebp; ret 0x14 > 0x7c975485 : mov [edx + 0x28], ebx; pop edi; pop esi; mov eax, edx; pop ebx; ret > 0x7c913473 : mov [edx], ebx; mov al, 1; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c9301b8 : mov [edx], edx; mov [edx + 0x34], eax; pop edi; pop ebp; ret 0x14 > 0x7c913368 : mov [edx + 0x10], esi; pop esi; mov al, 1; pop ebx; pop ebp; ret 8 > 0x7c964eaa : mov [esi + 0x40], eax; call [ebp + 0x14] > 0x7c96b80e : mov [esi + 0xfffffff0], eax; pop esi; mov al, 1; pop ebx; pop ebp; ret 0x10 > 0x7c963df4 : mov [esi + 8], ecx; mov [ecx], esi; pop esi; pop ebp; ret 4 > 0x7c918705 : mov [esi], ecx; mov al, 1; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c937d74 : mov [esi], edx; pop esi; mov [ecx], edx; pop ebx; pop ebp; ret 4 > 0x7c963df4 : mov [esi + 8], ecx; mov [ecx], esi; pop esi; pop ebp; ret 4 > 0x7c924cc1 : mov [edi + 0xc], eax; call [edi + 0x20] > 0x7c91a888 : mov [edi + 0xffffffff], ebp; call [esi + 0xffffffe8] > 0x7c96cb9a : mov [ebp + 0xfffffff8], ebx; call [ebp + 0x14] > 0x7c95c488 : mov [eax + 4], esi; mov al, 1; pop edi; pop esi; pop ebx; pop ebp; ret 0xc > 0x7c966a63 : mov [ebx + 0x18], eax; mov eax, esi; pop ebx; pop edi; pop esi; pop ebp; ret 0x14 > 0x7c91e303 : mov [ebx + 8], esi; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 0xc > 0x7c901133 : mov [ecx + 0xc], eax; mov [ecx + 8], 1; mov eax, 1; ret 4 > 0x7c951c8d : mov [ecx], eax; mov [ecx + 4], edx; mov eax, ecx; pop ebp; ret 8 > 0x7c951c8d : mov [ecx], eax; mov [ecx + 4], edx; mov eax, ecx; pop ebp; ret 8 > 0x7c92adf5 : mov [ecx], edx; and [eax + 8], 0; mov al, 1; pop ebp; ret 0x10 > 0x7c9223df : mov [edx + 0x58], esi; mov [edx + 0x5c], eax; pop esi; pop ebp; ret 8 > 0x7c9010a1 : mov [edx + 0xc], eax; mov [edx + 8], 1; xor eax, eax; ret 4 > 0x7c91ebc8 : mov [edx + 0xc], eax; mov eax, edx; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c9223df : mov [edx + 0x58], esi; mov [edx + 0x5c], eax; pop esi; pop ebp; ret 8 > 0x7c902c30 : mov [esi + 4], eax; rep movsd es:[edi], [esi]; pop edi; pop esi; ret 0x10 > 0x7c91e277 : mov [esi + 4], ebx; mov [esi], ebx; pop esi; pop ebx; pop ebp; ret 4 > 0x7c91bf6f : mov [edi + 2], eax; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c959379 : mov [edi], eax; mov [esi], edi; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c9027c0 : mov [edi], edx; mov eax, [esp + 0x10]; pop ebx; pop esi; pop edi; ret > 0x7c97baeb : mov [edi + 6], esi; xor eax, eax; pop edi; pop esi; pop ebx; pop ebp; ret 4 > 0x7c959379 : mov [edi], eax; mov [esi], edi; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c918822 : mov [eax + 4], edx; mov [eax + 6], dx; xor eax, eax; pop ebp; ret 0xc > 0x7c976e04 : mov [eax + 8], ecx; mov [eax + 0x10], edx; pop edi; pop esi; pop ebp; ret 0xc > 0x7c920bdb : mov [eax], esi; mov eax, [ebp + 8]; pop edi; pop esi; pop ebx; pop ebp; ret 0x18 > 0x7c9183f5 : mov [ecx], eax; mov eax, [ebp + 0xc]; sub eax, esi; pop esi; pop ebp; ret > 0x7c90ebac : mov [ecx + eax*2], ebx; xor eax, eax; pop esi; pop edi; pop ebx; pop ebp; ret 0xc > 0x7c91ec0e : mov [ecx + esi*4 + 0x10], edx; inc [ecx + 8]; pop esi; pop ebp; ret 0xc > 0x7c9664c8 : mov [ecx], esi; mov [ecx + 4], edi; pop edi; pop esi; pop ebx; pop ebp; ret 0x14 > 0x7c9664c8 : mov [ecx], esi; mov [ecx + 4], edi; pop edi; pop esi; pop ebx; pop ebp; ret 0x14 > 0x7c95d3a8 : mov [edx + 4], eax; mov [ecx], eax; xor eax, eax; pop esi; pop ebp; ret 4 > 0x7c91e799 : mov [esi + 0x28], ebx; mov [esi + 0x2c], ebx; pop esi; pop ebx; pop ebp; ret 4 > 0x7c93369f : mov [esi + 4], esi; mov [esi], esi; pop edi; pop esi; pop ebx; pop ebp; ret 8 > 0x7c90e8f9 : mov [ebp + 0xfffffff8], eax; lea eax, [ebp + 0xfffffff0]; mov fs:[0], eax; ret > 0x7c9348de : mov [eax + 4], edx; mov [eax], 1; mov al, 1; pop edi; pop esi; pop ebp; ret 8 > 0x7c90fec6 : mov [ecx + 2], eax; mov [ecx + 4], esi; xor eax, eax; pop esi; pop ebp; ret 8 > 0x7c913159 : mov [ecx], edx; mov eax, [eax + 4]; mov [ecx + 4], eax; pop ebp; ret 8 > 0x7c913159 : mov [ecx], edx; mov eax, [eax + 4]; mov [ecx + 4], eax; pop ebp; ret 8 > 0x7c90fec5 : mov [ecx + 2], ax; mov [ecx + 4], esi; xor eax, eax; pop esi; pop ebp; ret 8 > 0x7c90fec6 : mov [ecx + 2], eax; mov [ecx + 4], esi; xor eax, eax; pop esi; pop ebp; ret 8 > 0x7c975483 : mov [edx], ebx; mov [edx + 0x28], ebx; pop edi; pop esi; mov eax, edx; pop ebx; ret > 0x7c977d5c : mov [esi + edi*4 + 0xe10], eax; xor eax, eax; inc eax; pop edi; pop esi; pop ebp; ret 8 > 0x7c93ab85 : mov [esi + 0xc], edx; mov [esi + 0x10], edi; pop ebp; pop ebx; pop edi; pop esi; ret 8 > 0x7c93ab85 : mov [esi + 0xc], edx; mov [esi + 0x10], edi; pop ebp; pop ebx; pop edi; pop esi; ret 8 > 0x7c924cc1 : mov [edi + 0xc], eax; call [edi + 0x20]; mov al, 1; pop esi; pop edi; pop ebp; ret 8 > 0x7c902566 : mov [edi], edx; mov eax, [esp + 8]; mov [edi + 2], 0; pop edi; ret > 0x7c9232aa : mov [ebp + 0xfffffe78], eax; mov eax, [ebp + 0xfffffe84]; mov [ebp + 0xfffffe80], eax; ret > 0x7c9214dd : mov [eax + 0x14], edx; mov [eax + 0x10], edx; mov [eax + 0x24], ecx; pop ebp; ret 0x14 > 0x7c93a02d : mov [eax + 8], esi; add edi, ecx; mov [eax + 0xc], edi; pop edi; pop esi; pop ebx; ret 8 > 0x7c93a02d : mov [eax + 8], esi; add edi, ecx; mov [eax + 0xc], edi; pop edi; pop esi; pop ebx; ret 8 > 0x7c9033c8 : mov [ebx + 0xb4], eax; lea eax, [ebp + 8]; mov [ebx + 0xc4], eax; pop ebx; ret 4 > 0x7c91a507 : mov [ecx + 0x44], eax; and [eax + 4], 0; and [eax + 8], 0; pop ebp; ret 8 > 0x7c9033e6 : mov [ecx], eax; mov eax, fs:[4]; mov ecx, [esp + 8]; mov [ecx], eax; ret 8 > 0x7c918baf : mov [edx], eax; mov eax, [ebp + 0xc]; mov [edx + 4], eax; pop edi; pop ebp; ret 0xc > 0x7c91c03e : mov [eax + 4], edx; pop esi; mov [edx], eax; mov [ecx + 4], eax; pop ebx; pop ebp; ret 4 > 0x7c91c03e : mov [eax + 4], edx; pop esi; mov [edx], eax; mov [ecx + 4], eax; pop ebx; pop ebp; ret 4 > 0x7c9158ad : mov [eax + 0x24], edi; mov [eax + 0x2c], ecx; mov [eax + 0x30], 1; pop esi; pop ebp; ret 8 > 0x7c91e274 : mov [esi + 8], ebx; mov [esi + 4], ebx; mov [esi], ebx; pop esi; pop ebx; pop ebp; ret 4 > 0x7c96cb95 : mov [ebp + 0xfffffffc], ebx; push 3; mov [ebp + 0xfffffff8], ebx; call [ebp + 0x14] > 0x7c95d3a5 : mov [eax + 4], ecx; mov [edx + 4], eax; mov [ecx], eax; xor eax, eax; pop esi; pop ebp; ret 4 > 0x7c9188e2 : mov [eax + 8], ecx; mov ecx, [ebp + 0x30]; mov [ecx], eax; xor eax, eax; pop ebx; pop ebp; ret 0x2c > 0x7c976e01 : mov [eax + 4], edi; mov [eax + 8], ecx; mov [eax + 0x10], edx; pop edi; pop esi; pop ebp; ret 0xc > 0x7c976e01 : mov [eax + 4], edi; mov [eax + 8], ecx; mov [eax + 0x10], edx; pop edi; pop esi; pop ebp; ret 0xc > 0x7c91e796 : mov [esi + 0x24], ebx; mov [esi + 0x28], ebx; mov [esi + 0x2c], ebx; pop esi; pop ebx; pop ebp; ret 4 > 0x7c95cc36 : mov [eax], eax; mov [eax + 8], ecx; mov [eax + 0xc], ecx; mov [eax + 0x10], ecx; pop ebp; ret 4 > 0x7c9793d8 : mov [ecx + 4], eax; neg eax; sbb eax, eax; and eax, [ebp + 0x10]; mov [ecx + 2], ax; pop ebp; ret 0xc > 0x7c96953e : mov [esi], edx; dec [eax + 0x48]; mov ecx, [ecx + 8]; sub [eax + 0x4c], ecx; pop esi; pop ebp; ret 0xc > 0x7c96953e : mov [esi], edx; dec [eax + 0x48]; mov ecx, [ecx + 8]; sub [eax + 0x4c], ecx; pop esi; pop ebp; ret 0xc > 0x7c910428 : mov [ebp + 0xffffffe4], ecx; and [ebp + 0xfffffffc], 0; push [eax + 0x1c]; call [ebp + 0xffffffe4] > 0x7c9301b2 : mov [edx + 0x30], eax; mov eax, [ebp + 0x18]; mov [edx], edx; mov [edx + 0x34], eax; pop edi; pop ebp; ret 0x14 > 0x7c9301b2 : mov [edx + 0x30], eax; mov eax, [ebp + 0x18]; mov [edx], edx; mov [edx + 0x34], eax; pop edi; pop ebp; ret 0x14 > 0x7c964ea3 : mov [esi + 0x3c], eax; mov eax, [ebp + 0x20]; push esi; mov [esi + 0x40], eax; call [ebp + 0x14] > 0x7c921450 : mov [ebp + 0xfffffffc], ebx; lea eax, [ebp + 0xffffffe7]; push eax; push [ebp + 0x10]; push edi; call [ebp + 0xc] > 0x7c95cc33 : mov [eax + 4], eax; mov [eax], eax; mov [eax + 8], ecx; mov [eax + 0xc], ecx; mov [eax + 0x10], ecx; pop ebp; ret 4 > 0x7c91a502 : mov [eax], edx; mov ecx, [ecx + 0x10]; mov [ecx + 0x44], eax; and [eax + 4], 0; and [eax + 8], 0; pop ebp; ret 8 > 0x7c91a502 : mov [eax], edx; mov ecx, [ecx + 0x10]; mov [ecx + 0x44], eax; and [eax + 4], 0; and [eax + 8], 0; pop ebp; ret 8 > 0x7c9033bf : mov [ebx + 0xb8], eax; mov eax, [ebp]; mov [ebx + 0xb4], eax; lea eax, [ebp + 8]; mov [ebx + 0xc4], eax; pop ebx; ret 4 > 0x7c9214d7 : mov [eax + 0x20], ecx; mov ecx, [ebp + 0x18]; mov [eax + 0x14], edx; mov [eax + 0x10], edx; mov [eax + 0x24], ecx; pop ebp; ret 0x14 > 0x7c96960c : mov [eax + 0x20], ecx; mov edx, [ecx + 8]; add [eax + 0x2c], edx; mov ecx, [ecx + 0xc]; add [eax + 0x5c], ecx; pop ebp; ret 8 > 0x7c910422 : mov [ebp + 0xffffffe0], eax; mov ecx, [eax + 0x20]; mov [ebp + 0xffffffe4], ecx; and [ebp + 0xfffffffc], 0; push [eax + 0x1c]; call [ebp + 0xffffffe4] > 0x7c964e9d : mov [esi + 0x38], eax; mov eax, [ebp + 0x1c]; mov [esi + 0x3c], eax; mov eax, [ebp + 0x20]; push esi; mov [esi + 0x40], eax; call [ebp + 0x14] > 0x7c95e28f : mov [edi], gs; add [eax], eax; add [eax + 0xd4e9ff5d], cl; add [eax], al; add [ebp + 0x458b0c45], al; adc [eax + edi + 0x3b], dh; ret > 0x7c972f93 : mov [eax], edx; leave ; ret > 0x7c92abba : mov [ecx], eax; leave ; ret 0xc > 0x7c960a99 : mov [ecx], eax; leave ; ret 8 > 0x7c97bb68 : mov [ecx], edx; leave ; ret 0xc > 0x7c963b3e : mov [ecx + 8], edx; leave ; ret 8 > 0x7c951c53 : mov [esi], ecx; pop esi; leave ; ret 8 > 0x7c9645ad : mov [eax], edx; mov al, 1; leave ; ret 4 > 0x7c953fc5 : mov [ebx], esi; pop edi; pop esi; leave ; ret 0x10 > 0x7c919775 : mov [ecx], eax; mov al, 1; leave ; ret 4 > 0x7c95273b : mov [ecx], eax; xor eax, eax; leave ; ret 8 > 0x7c91a4ad : mov [ecx], edx; pop edi; pop esi; leave ; ret 4 > 0x7c911edf : mov [ebp + 0xfffffffc], edx; pop esi; leave ; ret 8 > 0x7c91b276 : mov [eax + 0xf84], ebx; pop esi; pop ebx; leave ; ret 4 > 0x7c935a86 : mov [eax + 4], edx; xor eax, eax; leave ; ret 8 > 0x7c91df19 : mov [ebx + 0x7c97fa10], eax; pop esi; pop ebx; leave ; ret 4 > 0x7c977084 : mov [ebx], eax; pop edi; pop esi; pop ebx; leave ; ret 0x10 > 0x7c962165 : mov [edx], eax; xor eax, eax; pop esi; leave ; ret 8 > 0x7c977502 : mov [esi + 0x1c], eax; pop edi; pop esi; leave ; ret 4 > 0x7c911fe2 : mov [esi + 0xc], eax; pop esi; pop ebx; leave ; ret 8 > 0x7c93057b : mov [esi], eax; xor eax, eax; pop esi; leave ; ret 0x10 > 0x7c917985 : mov [eax + 0x1b0], esi; pop edi; pop esi; pop ebx; leave ; ret 8 > 0x7c92b7be : mov [ebx + 0x170], eax; pop edi; pop esi; pop ebx; leave ; ret 4 > 0x7c91a84a : mov [ebx + 0x4c], eax; pop edi; pop esi; pop ebx; leave ; ret 4 > 0x7c92f3f0 : mov [ecx], eax; mov eax, [ebp + 0xfffffffc]; leave ; ret 0x10 > 0x7c91e5ac : mov [ecx], eax; pop esi; mov eax, ebx; pop ebx; leave ; ret 0x14 > 0x7c95c5a8 : mov [esi + 0x10], eax; xor eax, eax; pop esi; leave ; ret 8 > 0x7c9776c9 : mov [esi + 0x1c], eax; pop edi; pop esi; pop ebx; leave ; ret 4 > 0x7c97948b : mov [esi + 0x34], edx; pop edi; pop esi; pop ebx; leave ; ret 0xc > 0x7c969822 : mov [esi + 0x44], edi; pop edi; pop esi; pop ebx; leave ; ret 8 > 0x7c9156d9 : mov [edi], ecx; xor eax, eax; pop edi; pop esi; leave ; ret 0x10 > 0x7c915378 : mov [eax], ebx; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x10 > 0x7c970bf1 : mov [eax], ebx; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x14 > 0x7c9642e1 : mov [eax], ebx; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x1c > 0x7c911edd : mov [eax], esi; mov [ebp + 0xfffffffc], edx; pop esi; leave ; ret 8 > 0x7c911edd : mov [eax], esi; mov [ebp + 0xfffffffc], edx; pop esi; leave ; ret 8 > 0x7c971fdc : mov [eax], esi; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret > 0x7c920877 : mov [eax], esi; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x10 > 0x7c963b3a : mov [ecx + 6], eax; mov [ecx + 8], dx; leave ; ret 8 > 0x7c915464 : mov [ecx], eax; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x14 > 0x7c970de5 : mov [ecx], eax; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x1c > 0x7c9684ff : mov [edx], eax; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x14 > 0x7c927a4d : mov [esi], eax; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 4 > 0x7c95e46c : mov [esi], ebx; mov eax, edi; pop edi; pop esi; pop ebx; leave ; ret 0x28 > 0x7c97ba34 : mov [esi + 4], edx; xor eax, eax; pop edi; pop esi; leave ; ret 4 > 0x7c92101f : mov [edi], esi; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0xc > 0x7c934993 : mov [eax], ebx; pop esi; pop ebx; mov eax, [ebp + 0xfffffffc]; leave ; ret 8 > 0x7c953c6f : mov [eax + 0xc], edx; xor eax, eax; pop esi; pop edi; pop ebx; leave ; ret 0x18 > 0x7c935a84 : mov [eax], ecx; mov [eax + 4], edx; xor eax, eax; leave ; ret 8 > 0x7c92ab3d : mov [eax], esi; mov eax, [ebp + 0xfffffffc]; pop esi; pop ebx; leave ; ret 0xc > 0x7c965035 : mov [eax + 0xfffffffc], edi; mov eax, edi; pop edi; pop esi; pop ebx; leave ; ret 8 > 0x7c960991 : mov [ebx], eax; mov eax, [ebp + 0xfffffffc]; pop edi; pop ebx; leave ; ret 0xc > 0x7c917746 : mov [ebx + 0x1b0], esi; xor eax, eax; pop esi; pop edi; pop ebx; leave ; ret 0x10 > 0x7c95fdc8 : mov [ecx + 8], eax; mov eax, esi; pop edi; pop esi; pop ebx; leave ; ret 0x10 > 0x7c962163 : mov [ecx], eax; mov [edx], eax; xor eax, eax; pop esi; leave ; ret 8 > 0x7c9544d0 : mov [esi + 0xc], eax; xor eax, eax; pop ebx; pop edi; pop esi; leave ; ret 0xc > 0x7c91f5c6 : mov [esi + 8], edx; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0xc > 0x7c92d0ab : mov [esi + 0x10], edi; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x2c > 0x7c91d330 : mov [eax], edi; mov eax, [ebp + 0x10]; pop edi; pop esi; pop ebx; leave ; ret 0x10 > 0x7c95a342 : mov [ecx], eax; mov eax, [ebp + 0xffffffcc]; pop ebx; pop edi; pop esi; leave ; ret 0x14 > 0x7c9374e9 : mov [ecx + eax + 0x988], esi; pop esi; mov al, 1; pop ebx; pop edi; leave ; ret > 0x7c920527 : mov [ecx + eax*2], edi; xor eax, eax; pop edi; pop esi; pop ebx; leave ; ret 0x10 > 0x7c9536e2 : mov [edx], eax; mov [edx + 4], ecx; xor eax, eax; pop esi; leave ; ret 0x18 > 0x7c970728 : mov [esi*4 + 0x7c980638], eax; mov eax, esi; pop edi; pop esi; pop ebx; leave ; ret > 0x7c95d678 : mov [esi + 4], ecx; mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; leave ; ret 0xc > 0x7c911fde : mov [esi + 8], edx; mov [esi + 0xc], ax; pop esi; pop ebx; leave ; ret 8 > 0x7c97ba32 : mov [esi], ecx; mov [esi + 4], edx; xor eax, eax; pop edi; pop esi; leave ; ret 4 > 0x7c979488 : mov [esi + 0x30], edx; mov [esi + 0x34], edx; pop edi; pop esi; pop ebx; leave ; ret 0xc > 0x7c97ba32 : mov [esi], ecx; mov [esi + 4], edx; xor eax, eax; pop edi; pop esi; leave ; ret 4 > 0x7c91a8de : mov [edi + 0x48], eax; mov [edi + 0x4c], 1; pop ebx; pop edi; pop esi; leave ; ret 4 > 0x7c953fc0 : mov [eax], ecx; mov eax, [ebp + 0xfffffffc]; mov [ebx], esi; pop edi; pop esi; leave ; ret 0x10 > 0x7c91b26d : mov [esi + 0xc], eax; mov eax, fs:[0x18]; mov [eax + 0xf84], ebx; pop esi; pop ebx; leave ; ret 4 > 0x7c91b26d : mov [esi + 0xc], eax; mov eax, fs:[0x18]; mov [eax + 0xf84], ebx; pop esi; pop ebx; leave ; ret 4