ropshell> use 911ddf2e16761643a47225f654d811e5 (download)
name         : ntdll.dll (i386/PE)
base address : 0x7c901000
total gadgets: 6968

ropshell> search mov eax [ %
found 252 gadgets
> 0x7c9033f9 : mov eax, [0]; ret
> 0x7c902afc : mov eax, [eax]; ret 4
> 0x7c9773ce : mov eax, [eax + 0x20]; ret
> 0x7c9773dd : mov eax, [eax + 0x24]; ret
> 0x7c9565ea : mov eax, [eax + 0x30]; ret
> 0x7c90fe27 : mov eax, [eax + 0x34]; ret
> 0x7c90ff24 : mov eax, [eax + 0x68]; ret
> 0x7c964c53 : mov eax, [eax + 0xbf4]; ret
> 0x7c951d7c : mov eax, [eax + 0xf24]; ret
> 0x7c9204a7 : mov eax, [eax + 0xfb0]; ret
> 0x7c901609 : mov eax, [eax]; push eax; ret
> 0x7c90e2b5 : mov eax, [edx + 4]; ret
> 0x7c902488 : mov eax, [esp + 4]; ret
> 0x7c90e2ca : mov eax, [esp + 8]; ret
> 0x7c923b81 : mov eax, [eax + 0x14]; pop ebp; ret 4
> 0x7c9641a4 : mov eax, [eax + 0x18]; pop ebp; ret 4
> 0x7c910086 : mov eax, [eax + 4]; pop ebp; ret 4
> 0x7c928568 : mov eax, [eax + 4]; pop ebp; ret 8
> 0x7c901630 : mov eax, [eax + 4]; push eax; ret
> 0x7c971773 : mov eax, [ebp + 0x10]; pop ebp; ret
> 0x7c92dcd4 : mov eax, [ebp + 0xc]; pop ebp; ret
> 0x7c912f7a : mov eax, [ebp + 8]; pop ebp; ret
> 0x7c978157 : mov eax, [ebp + 8]; pop ebp; ret 4
> 0x7c903236 : mov eax, [esp + 4]; cdq ; ret 4
> 0x7c901216 : mov eax, [esp + 4]; int3 ; ret 4
> 0x7c9015d4 : mov eax, [esp + 4]; mul ecx; ret 0x10
> 0x7c902482 : mov eax, [esp + 8]; pop edi; ret
> 0x7c9136e5 : mov eax, [ebp + 8]; inc eax; pop ebp; ret 4
> 0x7c902b78 : mov eax, [esp + 0x14]; pop edi; pop esi; ret 0xc
> 0x7c90323e : mov eax, [esp + 4]; xor edx, edx; ret 4
> 0x7c90e4ff : mov eax, [esp]; mov esp, ebp; pop ebp; ret
> 0x7c95f308 : mov eax, [eax + 0xfffffff8]; sub eax, ecx; pop ebp; ret 4
> 0x7c92a271 : mov eax, [ebp + 8]; add eax, 2; pop ebp; ret 4
> 0x7c9103c5 : mov eax, [ebp + 8]; add eax, edx; pop ebp; ret 0x14
> 0x7c95c258 : mov eax, [ebp + 8]; pop edi; pop esi; pop ebp; ret 4
> 0x7c912df9 : mov eax, [esi + 0x20]; pop esi; pop ebx; pop ebp; ret 0x10
> 0x7c90277e : mov eax, [esp + 0x10]; pop ebx; pop esi; pop edi; ret
> 0x7c903016 : mov eax, [esp + 4]; imul [esp + 8]; ret 8
> 0x7c902af8 : mov eax, [esp + 4]; mov eax, [eax]; ret 4
> 0x7c903022 : mov eax, [esp + 4]; mul [esp + 8]; ret 8
> 0x7c90ff21 : mov eax, [eax + 0x30]; mov eax, [eax + 0x68]; ret
> 0x7c9537e3 : mov eax, [eax + 0x30]; or [eax + 0x6b], 0x10; ret
> 0x7c9565e7 : mov eax, [eax + 0xc]; mov eax, [eax + 0x30]; ret
> 0x7c96c590 : mov eax, [ebp + 0x14]; pop edi; pop ebx; pop esi; pop ebp; ret 0x10
> 0x7c9183f7 : mov eax, [ebp + 0xc]; sub eax, esi; pop esi; pop ebp; ret
> 0x7c9232b0 : mov eax, [ebp + 0xfffffe84]; mov [ebp + 0xfffffe80], eax; ret
> 0x7c920bdd : mov eax, [ebp + 8]; pop edi; pop esi; pop ebx; pop ebp; ret 0x18
> 0x7c9682bd : mov eax, [ebp + 8]; pop esi; pop ebx; pop edi; pop ebp; ret 0x1c
> 0x7c9015ec : mov eax, [esp + 8]; mul ecx; add edx, ebx; pop ebx; ret 0x10
> 0x7c9031d6 : mov eax, [esp + 8]; xor edx, edx; shr eax, cl; ret 0xc
> 0x7c90e46d : mov eax, [eax + 0x2c]; call [eax + edx*4]
> 0x7c91315b : mov eax, [eax + 4]; mov [ecx + 4], eax; pop ebp; ret 8
> 0x7c96cd46 : mov eax, [eax]; shr eax, 8; mov [edx], eax; pop ebp; ret 8
> 0x7c928565 : mov eax, [ebp + 0xc]; mov eax, [eax + 4]; pop ebp; ret 8
> 0x7c910082 : mov eax, [ebp + 8]; mov ax, [eax + 4]; pop ebp; ret 4
> 0x7c923b7e : mov eax, [ebp + 8]; mov eax, [eax + 0x14]; pop ebp; ret 4
> 0x7c9641a1 : mov eax, [ebp + 8]; mov eax, [eax + 0x18]; pop ebp; ret 4
> 0x7c9032d6 : mov eax, [ecx + 8]; mov [edx], eax; mov eax, 2; ret 0x10
> 0x7c9032fd : mov eax, [ecx + 8]; mov [edx], eax; mov eax, 3; ret 0x10
> 0x7c966711 : mov eax, [ecx]; pop esi; mov [ecx], ebx; pop ebx; pop ebp; ret 4
> 0x7c902568 : mov eax, [esp + 8]; mov [edi + 2], 0; pop edi; ret
> 0x7c9033e9 : mov eax, [4]; mov ecx, [esp + 8]; mov [ecx], eax; ret 8
> 0x7c910457 : mov eax, [eax + 0x30]; push [eax + 0x1c]; call [eax + 0x24]; ret
> 0x7c94e7a4 : mov eax, [eax]; mov [ebp + 0xfffffd08], eax; xor eax, eax; inc eax; ret
> 0x7c948445 : mov eax, [eax]; mov [ebp + 0xfffffdd4], eax; xor eax, eax; inc eax; ret
> 0x7c94885d : mov eax, [eax]; mov [ebp + 0xfffffe54], eax; xor eax, eax; inc eax; ret
> 0x7c960e2d : mov eax, [eax]; mov [ebp + 0xffffff04], eax; xor eax, eax; inc eax; ret
> 0x7c97887c : mov eax, [eax]; mov [ebp + 0xffffff44], eax; xor eax, eax; inc eax; ret
> 0x7c978a41 : mov eax, [eax]; mov [ebp + 0xffffff4c], eax; xor eax, eax; inc eax; ret
> 0x7c978a80 : mov eax, [eax]; mov [ebp + 0xffffff50], eax; xor eax, eax; inc eax; ret
> 0x7c960c40 : mov eax, [eax]; mov [ebp + 0xffffff68], eax; xor eax, eax; inc eax; ret
> 0x7c91259b : mov eax, [eax]; mov [ebp + 0xffffff84], eax; xor eax, eax; inc eax; ret
> 0x7c9782d7 : mov eax, [eax]; mov [ebp + 0xffffff90], eax; xor eax, eax; inc eax; ret
> 0x7c93bf31 : mov eax, [eax]; mov [ebp + 0xffffff94], eax; xor eax, eax; inc eax; ret
> 0x7c94ccbf : mov eax, [eax]; mov [ebp + 0xffffff98], eax; xor eax, eax; inc eax; ret
> 0x7c94bf2b : mov eax, [eax]; mov [ebp + 0xffffff9c], eax; xor eax, eax; inc eax; ret
> 0x7c949bb6 : mov eax, [eax]; mov [ebp + 0xffffffb0], eax; xor eax, eax; inc eax; ret
> 0x7c94cabb : mov eax, [eax]; mov [ebp + 0xffffffb8], eax; xor eax, eax; inc eax; ret
> 0x7c94e736 : mov eax, [eax]; mov [ebp + 0xffffffbc], eax; xor eax, eax; inc eax; ret
> 0x7c9622fb : mov eax, [eax]; mov [ebp + 0xffffffc8], eax; xor eax, eax; inc eax; ret
> 0x7c948546 : mov eax, [eax]; mov [ebp + 0xffffffcc], eax; xor eax, eax; inc eax; ret
> 0x7c949a14 : mov eax, [eax]; mov [ebp + 0xffffffd0], eax; xor eax, eax; inc eax; ret
> 0x7c95ca71 : mov eax, [eax]; mov [ebp + 0xffffffd4], eax; xor eax, eax; inc eax; ret
> 0x7c949abf : mov eax, [eax]; mov [ebp + 0xffffffd8], eax; xor eax, eax; inc eax; ret
> 0x7c949a7b : mov eax, [eax]; mov [ebp + 0xffffffdc], eax; xor eax, eax; inc eax; ret
> 0x7c94cc34 : mov eax, [eax]; mov [ebp + 0xffffffe0], eax; xor eax, eax; inc eax; ret
> 0x7c94cb5f : mov eax, [eax]; mov [ebp + 0xffffffe4], eax; xor eax, eax; inc eax; ret
> 0x7c9133eb : mov eax, [ebp + 0x10]; mov [eax], edx; mov al, 1; pop ebp; ret 0xc
> 0x7c92993f : mov eax, [ebp + 0x28]; mov [eax], edx; pop edi; pop esi; pop ebp; ret 0x24
> 0x7c918bb1 : mov eax, [ebp + 0xc]; mov [edx + 4], eax; pop edi; pop ebp; ret 0xc
> 0x7c9136bd : mov eax, [ebp + 8]; lea eax, [eax*4 + 8]; pop ebp; ret 4
> 0x7c938129 : mov eax, [ebp + 8]; test eax, [ebp + 0xc]; setne al; pop ebp; ret 8
> 0x7c902c4c : mov eax, [esp + 0x10]; shr ecx, 2; rep stosd es:[edi], eax; pop edi; ret 0xc
> 0x7c911bba : mov eax, [eax + esi*4]; add eax, 8; pop edi; pop ebx; pop esi; pop ebp; ret 8
> 0x7c91bb94 : mov eax, [ebp + 8]; mov [edx], ax; add [ecx], 2; pop ebp; ret
> 0x7c902b11 : mov eax, [edx]; mov edx, [edx + 4];  cmpxchg8b [ebp]; pop ebp; pop ebx; ret 4
> 0x7c926be6 : mov eax, [esi]; mov [edi], ax; xor eax, eax; pop edi; pop esi; pop ebp; ret 0xc
> 0x7c9027cf : mov eax, [esp + 0x10]; mov [edi + 2], dl; pop ebx; pop esi; pop edi; ret
> 0x7c910457 : mov eax, [eax + 0x30]; push [eax + 0x1c]; call [eax + 0x24]
> 0x7c9565e4 : mov eax, [eax + 0xc]; mov eax, [eax + 0xc]; mov eax, [eax + 0x30]; ret
> 0x7c95f48f : mov eax, [eax + esi*2]; add ax, dx; pop edi; movzx eax, ax; pop esi; pop ebp; ret 4
> 0x7c934fd5 : mov eax, [ebp + 8]; and [eax], 0; and [eax + 4], 0; pop ebp; ret 4
> 0x7c9161fe : mov eax, [edx]; add [ebp + 0xfffdcc85], cl; call [eax + 0xffffff8d]
> 0x7c902b44 : mov eax, [esp + 4]; bswap edx; bswap eax; mov ecx, eax; mov eax, edx; mov edx, ecx; ret
> 0x7c90320e : mov eax, [esp + 4]; mov edx, [esp + 8]; neg edx; neg eax; sbb edx, 0; ret 8
> 0x7c90e46a : mov eax, [eax + 0x30]; mov eax, [eax + 0x2c]; call [eax + edx*4]
> 0x7c94e7a2 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xfffffd08], eax; xor eax, eax; inc eax; ret
> 0x7c948443 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xfffffdd4], eax; xor eax, eax; inc eax; ret
> 0x7c94885b : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xfffffe54], eax; xor eax, eax; inc eax; ret
> 0x7c960e2b : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff04], eax; xor eax, eax; inc eax; ret
> 0x7c97887a : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff44], eax; xor eax, eax; inc eax; ret
> 0x7c978a3f : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff4c], eax; xor eax, eax; inc eax; ret
> 0x7c978a7e : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff50], eax; xor eax, eax; inc eax; ret
> 0x7c960c3e : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff68], eax; xor eax, eax; inc eax; ret
> 0x7c912599 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff84], eax; xor eax, eax; inc eax; ret
> 0x7c9782d5 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff90], eax; xor eax, eax; inc eax; ret
> 0x7c93bf2f : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff94], eax; xor eax, eax; inc eax; ret
> 0x7c94ccbd : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff98], eax; xor eax, eax; inc eax; ret
> 0x7c94bf29 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff9c], eax; xor eax, eax; inc eax; ret
> 0x7c949bb4 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffb0], eax; xor eax, eax; inc eax; ret
> 0x7c94cab9 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffb8], eax; xor eax, eax; inc eax; ret
> 0x7c94e734 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffbc], eax; xor eax, eax; inc eax; ret
> 0x7c9622f9 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffc8], eax; xor eax, eax; inc eax; ret
> 0x7c948544 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffcc], eax; xor eax, eax; inc eax; ret
> 0x7c949a12 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffd0], eax; xor eax, eax; inc eax; ret
> 0x7c95ca6f : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffd4], eax; xor eax, eax; inc eax; ret
> 0x7c949abd : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffd8], eax; xor eax, eax; inc eax; ret
> 0x7c949a79 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffdc], eax; xor eax, eax; inc eax; ret
> 0x7c94cc32 : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffe0], eax; xor eax, eax; inc eax; ret
> 0x7c94cb5d : mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffe4], eax; xor eax, eax; inc eax; ret
> 0x7c9301b5 : mov eax, [ebp + 0x18]; mov [edx], edx; mov [edx + 0x34], eax; pop edi; pop ebp; ret 0x14
> 0x7c9518e8 : mov eax, [ebp + 8]; mov ecx, [ebp + 0xc]; add [eax + 0xb0], ecx; pop ebp; ret 8
> 0x7c954536 : mov eax, [esi + 0x24]; add eax, esi; mov [esi + 0x24], edi; pop edi; pop esi; pop ebp; ret 8
> 0x7c9618c0 : mov eax, [esi + 0x90]; push [eax + edi*4]; call [ebp + 8]
> 0x7c90319e : mov eax, [esp + 4]; mov edx, [esp + 8]; shld edx, eax, cl; shl eax, cl; ret 0xc
> 0x7c9031fe : mov eax, [esp + 4]; mov edx, [esp + 8]; shrd eax, edx, cl; sar edx, cl; ret 0xc
> 0x7c9031c6 : mov eax, [esp + 4]; mov edx, [esp + 8]; shrd eax, edx, cl; shr edx, cl; ret 0xc
> 0x7c90ea6c : mov eax, [esp + 8]; mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret
> 0x7c92a1cf : mov eax, [eax + 2]; mov ecx, [ebp + 0xc]; mov [ecx], ax; xor eax, eax; pop ebp; ret 0xc
> 0x7c96508e : mov eax, [eax + 4]; mov ecx, [ebp + 0x10]; mov [ecx], eax; mov al, 1; pop ebp; ret 0xc
> 0x7c964ea6 : mov eax, [ebp + 0x20]; push esi; mov [esi + 0x40], eax; call [ebp + 0x14]
> 0x7c9131a3 : mov eax, [ebp + 8]; movzx eax, [eax + 1]; lea eax, [eax*4 + 8]; pop ebp; ret 4
> 0x7c95f302 : mov eax, [ebp + 8]; movzx ecx, [eax]; mov eax, [eax + 0xfffffff8]; sub eax, ecx; pop ebp; ret 4
> 0x7c91c25c : mov eax, [ebx + 0xc]; mov ecx, [ebp + 0xffffffcc]; mov [eax + 0x24], ecx; xor ecx, ecx; ret
> 0x7c90109e : mov eax, [ecx + 0x24]; mov [edx + 0xc], eax; mov [edx + 8], 1; xor eax, eax; ret 4
> 0x7c926a10 : mov eax, [ecx + eax*2]; movzx ecx, [ebp + 0xc]; movzx eax, ax; and eax, ecx; pop ebp; ret
> 0x7c91827d : mov eax, [ebp + 0xc]; mov ecx, [ebp + 8]; lea eax, [ecx + eax*4 + 8]; pop ebp; ret 8
> 0x7c9565e1 : mov eax, [eax + 0x30]; mov eax, [eax + 0xc]; mov eax, [eax + 0xc]; mov eax, [eax + 0x30]; ret
> 0x7c9232a4 : mov eax, [ebp + 0xfffffe7c]; mov [ebp + 0xfffffe78], eax; mov eax, [ebp + 0xfffffe84]; mov [ebp + 0xfffffe80], eax; ret
> 0x7c9033c5 : mov eax, [ebp]; mov [ebx + 0xb4], eax; lea eax, [ebp + 8]; mov [ebx + 0xc4], eax; pop ebx; ret 4
> 0x7c903002 : mov eax, [esp + 4]; add eax, [esp + 0xc]; mov edx, [esp + 8]; adc edx, [esp + 0x10]; ret 0x10
> 0x7c903222 : mov eax, [esp + 4]; sub eax, [esp + 0xc]; mov edx, [esp + 8]; sbb edx, [esp + 0x10]; ret 0x10
> 0x7c94e79f : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xfffffd08], eax; xor eax, eax; inc eax; ret
> 0x7c948440 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xfffffdd4], eax; xor eax, eax; inc eax; ret
> 0x7c948858 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xfffffe54], eax; xor eax, eax; inc eax; ret
> 0x7c960e28 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff04], eax; xor eax, eax; inc eax; ret
> 0x7c978877 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff44], eax; xor eax, eax; inc eax; ret
> 0x7c978a3c : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff4c], eax; xor eax, eax; inc eax; ret
> 0x7c978a7b : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff50], eax; xor eax, eax; inc eax; ret
> 0x7c960c3b : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff68], eax; xor eax, eax; inc eax; ret
> 0x7c912596 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff84], eax; xor eax, eax; inc eax; ret
> 0x7c9782d2 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff90], eax; xor eax, eax; inc eax; ret
> 0x7c93bf2c : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff94], eax; xor eax, eax; inc eax; ret
> 0x7c94ccba : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff98], eax; xor eax, eax; inc eax; ret
> 0x7c94bf26 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffff9c], eax; xor eax, eax; inc eax; ret
> 0x7c949bb1 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffb0], eax; xor eax, eax; inc eax; ret
> 0x7c94cab6 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffb8], eax; xor eax, eax; inc eax; ret
> 0x7c94e731 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffbc], eax; xor eax, eax; inc eax; ret
> 0x7c9622f6 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffc8], eax; xor eax, eax; inc eax; ret
> 0x7c948541 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffcc], eax; xor eax, eax; inc eax; ret
> 0x7c949a0f : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffd0], eax; xor eax, eax; inc eax; ret
> 0x7c95ca6c : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffd4], eax; xor eax, eax; inc eax; ret
> 0x7c949aba : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffd8], eax; xor eax, eax; inc eax; ret
> 0x7c949a76 : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffdc], eax; xor eax, eax; inc eax; ret
> 0x7c94cc2f : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffe0], eax; xor eax, eax; inc eax; ret
> 0x7c94cb5a : mov eax, [ebp + 0xffffffec]; mov eax, [eax]; mov eax, [eax]; mov [ebp + 0xffffffe4], eax; xor eax, eax; inc eax; ret
> 0x7c918bac : mov eax, [ebp + 8]; mov [edx], eax; mov eax, [ebp + 0xc]; mov [edx + 4], eax; pop edi; pop ebp; ret 0xc
> 0x7c9128be : mov eax, [ecx + 0x14]; sub eax, [ecx + 0xc]; add eax, [ebp + 0xc]; add eax, [ebp + 0x10]; pop ebp; ret 0xc
> 0x7c902c29 : mov eax, [esp + 0x18]; lea edi, [esi + 8]; mov [esi + 4], eax; rep movsd es:[edi], [esi]; pop edi; pop esi; ret 0x10
> 0x7c90e9b9 : mov eax, [edi + ecx*4 + 8]; xor ebx, ebx; xor ecx, ecx; xor edx, edx; xor esi, esi; xor edi, edi; call eax
> 0x7c9033dd : mov eax, [8]; mov ecx, [esp + 4]; mov [ecx], eax; mov eax, fs:[4]; mov ecx, [esp + 8]; mov [ecx], eax; ret 8
> 0x7c918a81 : mov eax, [ebp + 8]; mov ecx, [ebp + 0x10]; mov [eax], ecx; mov ecx, [ebp + 0xc]; mov [eax + 4], ecx; pop ebp; ret 0xc
> 0x7c964ea0 : mov eax, [ebp + 0x1c]; mov [esi + 0x3c], eax; mov eax, [ebp + 0x20]; push esi; mov [esi + 0x40], eax; call [ebp + 0x14]
> 0x7c91041f : mov eax, [eax + 0x30]; mov [ebp + 0xffffffe0], eax; mov ecx, [eax + 0x20]; mov [ebp + 0xffffffe4], ecx; and [ebp + 0xfffffffc], 0; push [eax + 0x1c]; call [ebp + 0xffffffe4]
> 0x7c92f3f2 : mov eax, [ebp + 0xfffffffc]; leave ; ret 0x10
> 0x7c934997 : mov eax, [ebp + 0xfffffffc]; leave ; ret 8
> 0x7c950e24 : mov eax, [ebp + 8]; leave ; ret
> 0x7c92cea6 : mov eax, [ebp + 8]; leave ; ret 0x1c
> 0x7c9595c5 : mov eax, [ebp + 0xfffffffc]; pop ebx; leave ; ret 8
> 0x7c952cb7 : mov eax, [ebp + 0xfffffffc]; pop esi; leave ; ret
> 0x7c917f68 : mov eax, [eax + esi*2]; pop esi; leave ; ret 0x14
> 0x7c97bcd4 : mov eax, [ebp + 0xc]; pop esi; pop ebx; leave ; ret 0x14
> 0x7c95da41 : mov eax, [ebp + 0xfffffff8]; pop esi; pop ebx; leave ; ret 0x18
> 0x7c92fd15 : mov eax, [ebp + 0xfffffffc]; pop edi; pop ebx; leave ; ret 0x14
> 0x7c960993 : mov eax, [ebp + 0xfffffffc]; pop edi; pop ebx; leave ; ret 0xc
> 0x7c918b36 : mov eax, [ebp + 0xfffffffc]; pop edi; pop ebx; leave ; ret 8
> 0x7c97aa31 : mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; leave ; ret 0x14
> 0x7c95d67b : mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; leave ; ret 0xc
> 0x7c92ab3f : mov eax, [ebp + 0xfffffffc]; pop esi; pop ebx; leave ; ret 0xc
> 0x7c92f68b : mov eax, [ebp + 8]; pop edi; pop esi; leave ; ret 0x14
> 0x7c95464a : mov eax, [ebp + 8]; pop esi; pop ebx; leave ; ret 8
> 0x7c901f10 : mov eax, [ebp + 8]; pop esi; pop edi; leave ; ret
> 0x7c91d332 : mov eax, [ebp + 0x10]; pop edi; pop esi; pop ebx; leave ; ret 0x10
> 0x7c91dadf : mov eax, [ebp + 0x10]; pop edi; pop esi; pop ebx; leave ; ret 0x14
> 0x7c95d849 : mov eax, [ebp + 0xc]; pop edi; pop esi; pop ebx; leave ; ret 0x10
> 0x7c93684a : mov eax, [ebp + 0xc]; pop edi; pop esi; pop ebx; leave ; ret 0x18
> 0x7c961d0a : mov eax, [ebp + 0xc]; pop edi; pop esi; pop ebx; leave ; ret 8
> 0x7c95a344 : mov eax, [ebp + 0xffffffcc]; pop ebx; pop edi; pop esi; leave ; ret 0x14
> 0x7c969a6a : mov eax, [ebp + 0xfffffff0]; pop edi; pop esi; pop ebx; leave ; ret 4
> 0x7c926d66 : mov eax, [ebp + 0xfffffff4]; pop edi; pop esi; pop ebx; leave ; ret
> 0x7c958eae : mov eax, [ebp + 0xfffffff4]; pop edi; pop esi; pop ebx; leave ; ret 0x14
> 0x7c9362e2 : mov eax, [ebp + 0xfffffff4]; pop edi; pop esi; pop ebx; leave ; ret 4
> 0x7c9388ce : mov eax, [ebp + 0xfffffff4]; pop esi; pop ebx; pop edi; leave ; ret 0x14
> 0x7c975be4 : mov eax, [ebp + 0xfffffff8]; pop edi; pop esi; pop ebx; leave ; ret
> 0x7c920935 : mov eax, [ebp + 0xfffffff8]; pop edi; pop esi; pop ebx; leave ; ret 0x10
> 0x7c958bfd : mov eax, [ebp + 0xfffffff8]; pop edi; pop esi; pop ebx; leave ; ret 0x14
> 0x7c934db4 : mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; pop ebx; leave ; ret
> 0x7c924536 : mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; pop ebx; leave ; ret 0x10
> 0x7c9534f3 : mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; pop ebx; leave ; ret 0xc
> 0x7c9181da : mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; pop ebx; leave ; ret 4
> 0x7c95d7a7 : mov eax, [ebp + 0xfffffffc]; pop edi; pop esi; pop ebx; leave ; ret 8
> 0x7c912c39 : mov eax, [ebp + 0xfffffffc]; pop esi; pop edi; pop ebx; leave ; ret 0xc
> 0x7c9510fc : mov eax, [ebp + 0xfffffffc]; sub eax, esi; pop esi; leave ; ret
> 0x7c976ca6 : mov eax, [ebp + 8]; pop ebx; pop edi; pop esi; leave ; ret 0x1c
> 0x7c961e38 : mov eax, [ebp + 8]; pop ebx; pop esi; pop edi; leave ; ret 8
> 0x7c921320 : mov eax, [ebp + 8]; pop edi; pop esi; pop ebx; leave ; ret 0x14
> 0x7c9018d9 : mov eax, [ebp + 0xfffffff4]; mov edx, [ebp + 0xfffffff8]; leave ; ret
> 0x7c913416 : mov eax, [ebp + 0xfffffffc]; xor eax, [ebp + 8]; leave ; ret 4
> 0x7c972380 : mov eax, [ebp + 0x18]; fstp [eax]; mov eax, esi; pop esi; leave ; ret
> 0x7c926414 : mov eax, [ebp + 0xc]; add eax, ecx; pop edi; pop esi; pop ebx; leave ; ret 0xc
> 0x7c953fc2 : mov eax, [ebp + 0xfffffffc]; mov [ebx], esi; pop edi; pop esi; leave ; ret 0x10
> 0x7c9645a9 : mov eax, [ebp + 8]; mov [eax], dx; mov al, 1; leave ; ret 4
> 0x7c91df16 : mov eax, [eax + 0x58]; mov [ebx + 0x7c97fa10], eax; pop esi; pop ebx; leave ; ret 4
> 0x7c930578 : mov eax, [ebp + 0x10]; mov [esi], eax; xor eax, eax; pop esi; leave ; ret 0x10
> 0x7c917f64 : mov eax, [ebp + 0x18]; mov ax, [eax + esi*2]; pop esi; leave ; ret 0x14
> 0x7c91852b : mov eax, [ebp + 0xffffffe0]; mov [eax], 0; mov eax, esi; pop esi; leave ; ret
> 0x7c9774ff : mov eax, [ebp + 0xffffffe0]; mov [esi + 0x1c], eax; pop edi; pop esi; leave ; ret 4
> 0x7c92abb4 : mov eax, [eax + 0x44]; mov ecx, [ebp + 0x10]; mov [ecx], eax; leave ; ret 0xc
> 0x7c95f7b4 : mov eax, [ebp + 0xc]; sub eax, [ebp + 0xfffffffc]; pop edi; pop esi; pop ebx; leave ; ret 0xc
> 0x7c925c07 : mov eax, [ebp + 0xffffffe0]; mov [eax], 0; mov eax, edi; pop edi; pop esi; leave ; ret
> 0x7c95c5a5 : mov eax, [ebp + 0xfffffff8]; mov [esi + 0x10], eax; xor eax, eax; pop esi; leave ; ret 8
> 0x7c917982 : mov eax, [ebp + 0xfffffffc]; mov [eax + 0x1b0], esi; pop edi; pop esi; pop ebx; leave ; ret 8
> 0x7c92b7bb : mov eax, [ebp + 0xfffffffc]; mov [ebx + 0x170], eax; pop edi; pop esi; pop ebx; leave ; ret 4
> 0x7c91a847 : mov eax, [ebp + 0xfffffffc]; mov [ebx + 0x4c], eax; pop edi; pop esi; pop ebx; leave ; ret 4
> 0x7c91a4a9 : mov eax, [ecx]; mov edx, [eax]; mov [ecx], edx; pop edi; pop esi; leave ; ret 4
> 0x7c911eda : mov eax, [ebp + 0xc]; mov [eax], esi; mov [ebp + 0xfffffffc], edx; pop esi; leave ; ret 8
> 0x7c952735 : mov eax, [eax + 0x30]; mov ecx, [ebp + 0xc]; mov [ecx], eax; xor eax, eax; leave ; ret 8
> 0x7c92ab3a : mov eax, [ebp + 0xc]; mov [eax], esi; mov eax, [ebp + 0xfffffffc]; pop esi; pop ebx; leave ; ret 0xc
> 0x7c96098e : mov eax, [ebp + 0xfffffffc]; mov [ebx], eax; mov eax, [ebp + 0xfffffffc]; pop edi; pop ebx; leave ; ret 0xc
> 0x7c911fda : mov eax, [ebp + 0xc]; mov [esi + 8], dx; mov [esi + 0xc], ax; pop esi; pop ebx; leave ; ret 8
> 0x7c963bde : mov eax, [ebp + 0xc]; adc edx, [ebp + 0xffffffe4]; mov [eax], ecx; mov [eax + 4], edx; xor eax, eax; leave ; ret 8
> 0x7c935a7e : mov eax, [ebp + 0xc]; sbb edx, [ebp + 0xffffffe4]; mov [eax], ecx; mov [eax + 4], edx; xor eax, eax; leave ; ret 8