ropshell> use 911ddf2e16761643a47225f654d811e5 (download)
name         : ntdll.dll (i386/PE)
base address : 0x7c901000
total gadgets: 6968

ropshell> search pop % ;; -leave
found many, display max 256 gadgets
> 0x7c90e504 : pop ebp; ret
> 0x7c90118f : pop ebp; ret 0x10
> 0x7c903134 : pop ebp; ret 0x14
> 0x7c9187e0 : pop ebp; ret 0x18
> 0x7c90fcc9 : pop ebp; ret 0x1c
> 0x7c917ba9 : pop ebp; ret 0x20
> 0x7c929946 : pop ebp; ret 0x24
> 0x7c9188ed : pop ebp; ret 0x2c
> 0x7c902f16 : pop ebp; ret 0xc
> 0x7c90ea1d : pop ebp; ret 4
> 0x7c9011d4 : pop ebp; ret 8
> 0x7c90192c : pop ebx; ret
> 0x7c9015f4 : pop ebx; ret 0x10
> 0x7c90327c : pop ebx; ret 0x14
> 0x7c902b1c : pop ebx; ret 4
> 0x7c902af4 : pop ebx; ret 8
> 0x7c96d53a : pop ecx; ret
> 0x7c902486 : pop edi; ret
> 0x7c9014e1 : pop edi; ret 0x10
> 0x7c902bc0 : pop edi; ret 0xc
> 0x7c901259 : pop edi; ret 8
> 0x7c90137d : pop edx; ret
> 0x7c901d52 : pop esi; ret
> 0x7c901822 : pop esi; ret 0x10
> 0x7c902b7d : pop esi; ret 0xc
> 0x7c93ab8e : pop esi; ret 8
> 0x7c972c6a : pop eax; pop ebp; ret
> 0x7c913bce : pop eax; pop ebp; ret 4
> 0x7c9694dc : pop eax; pop ebp; ret 8
> 0x7c902a88 : pop ebp; pop ebx; ret
> 0x7c902b1b : pop ebp; pop ebx; ret 4
> 0x7c902af3 : pop ebp; pop ebx; ret 8
> 0x7c915264 : pop ebx; pop ebp; ret
> 0x7c910385 : pop ebx; pop ebp; ret 0x10
> 0x7c90ed29 : pop ebx; pop ebp; ret 0x14
> 0x7c920be2 : pop ebx; pop ebp; ret 0x18
> 0x7c964ec5 : pop ebx; pop ebp; ret 0x1c
> 0x7c917ba8 : pop ebx; pop ebp; ret 0x20
> 0x7c9188ec : pop ebx; pop ebp; ret 0x2c
> 0x7c90ebb3 : pop ebx; pop ebp; ret 0xc
> 0x7c91c047 : pop ebx; pop ebp; ret 4
> 0x7c9106f0 : pop ebx; pop ebp; ret 8
> 0x7c90e7f4 : pop ebx; pop edi; ret
> 0x7c926aa5 : pop ecx; pop ebp; ret
> 0x7c91d1f0 : pop ecx; pop ebp; ret 4
> 0x7c90eb31 : pop ecx; pop ebx; ret 4
> 0x7c92388c : pop edi; pop ebp; ret
> 0x7c924a67 : pop edi; pop ebp; ret 0x10
> 0x7c9301bd : pop edi; pop ebp; ret 0x14
> 0x7c9187df : pop edi; pop ebp; ret 0x18
> 0x7c90fcc8 : pop edi; pop ebp; ret 0x1c
> 0x7c91053d : pop edi; pop ebp; ret 0xc
> 0x7c90f725 : pop edi; pop ebp; ret 4
> 0x7c91866e : pop edi; pop ebp; ret 8
> 0x7c901cf8 : pop edi; pop ebx; ret
> 0x7c9016e4 : pop edi; pop ebx; ret 0x10
> 0x7c901d51 : pop edi; pop esi; ret
> 0x7c902c35 : pop edi; pop esi; ret 0x10
> 0x7c902b7c : pop edi; pop esi; ret 0xc
> 0x7c93ab8d : pop edi; pop esi; ret 8
> 0x7c9105b2 : pop esi; pop ebp; ret
> 0x7c90118e : pop esi; pop ebp; ret 0x10
> 0x7c9151e9 : pop esi; pop ebp; ret 0x14
> 0x7c91ccc1 : pop esi; pop ebp; ret 0x18
> 0x7c95c83d : pop esi; pop ebp; ret 0x20
> 0x7c929945 : pop esi; pop ebp; ret 0x24
> 0x7c938947 : pop esi; pop ebp; ret 0x2c
> 0x7c902f15 : pop esi; pop ebp; ret 0xc
> 0x7c910575 : pop esi; pop ebp; ret 4
> 0x7c9011d3 : pop esi; pop ebp; ret 8
> 0x7c901931 : pop esi; pop ebx; ret
> 0x7c90178c : pop esi; pop ebx; ret 0x10
> 0x7c90327b : pop esi; pop ebx; ret 0x14
> 0x7c93a036 : pop esi; pop ebx; ret 8
> 0x7c902783 : pop esi; pop edi; ret
> 0x7c9014e0 : pop esi; pop edi; ret 0x10
> 0x7c96961a : pop esp; pop ebp; ret 8
> 0x7c922344 : pop eax; or dh, dh; ret
> 0x7c956d6f : pop ebp; jmp eax
> 0x7c911b19 : pop ebp; or al, 0x3b; ret
> 0x7c969ab2 : pop ebp; or al, 0x81; ret
> 0x7c919233 : pop ebp; or al, 0xf6; ret
> 0x7c919be7 : pop ebp; or al, 0xf7; ret
> 0x7c91220b : pop ebp; or bh, dh; ret
> 0x7c91034d : pop ebp; or dh, dh; ret
> 0x7c90eb30 : pop ebp; pop ecx; pop ebx; ret 4
> 0x7c9015be : pop ebp; pop esi; pop edi; ret 0x10
> 0x7c92388b : pop ebx; pop edi; pop ebp; ret
> 0x7c975d82 : pop ebx; pop edi; pop ebp; ret 0x10
> 0x7c9682c1 : pop ebx; pop edi; pop ebp; ret 0x1c
> 0x7c9206b8 : pop ebx; pop edi; pop ebp; ret 0xc
> 0x7c957d2b : pop ebx; pop edi; pop esi; ret
> 0x7c9030a2 : pop ebx; pop edi; pop esi; ret 0x10
> 0x7c93ab8c : pop ebx; pop edi; pop esi; ret 8
> 0x7c927e1e : pop ebx; pop esi; pop ebp; ret 0x10
> 0x7c95d916 : pop ebx; pop esi; pop ebp; ret 0x24
> 0x7c92d32d : pop ebx; pop esi; pop ebp; ret 0xc
> 0x7c955c43 : pop ebx; pop esi; pop ebp; ret 4
> 0x7c911bc1 : pop ebx; pop esi; pop ebp; ret 8
> 0x7c902782 : pop ebx; pop esi; pop edi; ret
> 0x7c9014df : pop ebx; pop esi; pop edi; ret 0x10
> 0x7c90e881 : pop ebx; xor eax, eax; ret
> 0x7c97261a : pop ecx; fdivr st(1); dec ecx; ret
> 0x7c926aa4 : pop ecx; pop ecx; pop ebp; ret
> 0x7c96d6c0 : pop ecx; pop esi; pop ebp; ret 8
> 0x7c90ff71 : pop edi; adc bh, dh; ret
> 0x7c93183c : pop edi; pop ebx; pop ebp; ret 0x10
> 0x7c90ebb2 : pop edi; pop ebx; pop ebp; ret 0xc
> 0x7c924981 : pop edi; pop esi; pop ebp; ret
> 0x7c90118d : pop edi; pop esi; pop ebp; ret 0x10
> 0x7c920763 : pop edi; pop esi; pop ebp; ret 0x14
> 0x7c95c83c : pop edi; pop esi; pop ebp; ret 0x20
> 0x7c929944 : pop edi; pop esi; pop ebp; ret 0x24
> 0x7c95833a : pop edi; pop esi; pop ebp; ret 0x2c
> 0x7c902f14 : pop edi; pop esi; pop ebp; ret 0xc
> 0x7c918e07 : pop edi; pop esi; pop ebp; ret 4
> 0x7c9011d2 : pop edi; pop esi; pop ebp; ret 8
> 0x7c90eae8 : pop edi; pop esi; pop ebx; ret
> 0x7c90327a : pop edi; pop esi; pop ebx; ret 0x14
> 0x7c93a035 : pop edi; pop esi; pop ebx; ret 8
> 0x7c90e7b4 : pop edi; xor eax, eax; ret
> 0x7c97a464 : pop edx; stc ; dec ecx; ret 0xc
> 0x7c902d36 : pop esi; adc al, 0xf; ret
> 0x7c902d1b : pop esi; add al, 0xf; ret
> 0x7c902d52 : pop esi; and al, 0xf; ret
> 0x7c902d7c : pop esi; cmp al, 0xf; ret
> 0x7c902d28 : pop esi; or al, 0xf; ret
> 0x7c938432 : pop esi; or dh, dh; ret
> 0x7c915263 : pop esi; pop ebx; pop ebp; ret
> 0x7c91073c : pop esi; pop ebx; pop ebp; ret 0x10
> 0x7c92ae42 : pop esi; pop ebx; pop ebp; ret 0x14
> 0x7c920be1 : pop esi; pop ebx; pop ebp; ret 0x18
> 0x7c964ec4 : pop esi; pop ebx; pop ebp; ret 0x1c
> 0x7c917ba7 : pop esi; pop ebx; pop ebp; ret 0x20
> 0x7c91222a : pop esi; pop ebx; pop ebp; ret 0xc
> 0x7c91e1ac : pop esi; pop ebx; pop ebp; ret 4
> 0x7c913478 : pop esi; pop ebx; pop ebp; ret 8
> 0x7c90e7f3 : pop esi; pop ebx; pop edi; ret
> 0x7c92af99 : pop esi; pop edi; pop ebp; ret 0x10
> 0x7c9187de : pop esi; pop edi; pop ebp; ret 0x18
> 0x7c91053c : pop esi; pop edi; pop ebp; ret 0xc
> 0x7c90f724 : pop esi; pop edi; pop ebp; ret 4
> 0x7c924cc9 : pop esi; pop edi; pop ebp; ret 8
> 0x7c90e8b9 : pop esi; pop edi; pop ebx; ret
> 0x7c902d44 : pop esi; sbb al, 0xf; ret
> 0x7c902d60 : pop esi; sub al, 0xf; ret
> 0x7c902d6e : pop esi; xor al, 0xf; ret
> 0x7c969659 : pop esp; pop esi; pop ebp; ret 0xc
> 0x7c9223e4 : pop esp; pop esi; pop ebp; ret 8
> 0x7c90e454 : pop eax; call eax
> 0x7c91d77a : pop ebp; fdiv [ebp + 0x1c]; ret
> 0x7c972e3c : pop ebp; mov esp, ebx; pop ebx; ret
> 0x7c93ab8b : pop ebp; pop ebx; pop edi; pop esi; ret 8
> 0x7c90ea01 : pop ebx; mov esp, ebp; pop ebp; ret
> 0x7c939580 : pop ebx; mov esp, ebp; pop ebp; ret 0x14
> 0x7c97cdef : pop ebx; mov esp, ebp; pop ebp; ret 0xc
> 0x7c97cf73 : pop ebx; mov esp, ebp; pop ebp; ret 4
> 0x7c90118c : pop ebx; pop edi; pop esi; pop ebp; ret 0x10
> 0x7c966a68 : pop ebx; pop edi; pop esi; pop ebp; ret 0x14
> 0x7c95c83b : pop ebx; pop edi; pop esi; pop ebp; ret 0x20
> 0x7c958339 : pop ebx; pop edi; pop esi; pop ebp; ret 0x2c
> 0x7c902f13 : pop ebx; pop edi; pop esi; pop ebp; ret 0xc
> 0x7c95610f : pop ebx; pop edi; pop esi; pop ebp; ret 4
> 0x7c9548d5 : pop ebx; pop edi; pop esi; pop ebp; ret 8
> 0x7c90e7b3 : pop ebx; pop edi; xor eax, eax; ret
> 0x7c92c160 : pop ebx; pop esi; pop edi; pop ebp; ret 0xc
> 0x7c90f723 : pop ebx; pop esi; pop edi; pop ebp; ret 4
> 0x7c95a0fb : pop ebx; pop esi; pop edi; pop ebp; ret 8
> 0x7c90eb2f : pop ecx; pop ebp; pop ecx; pop ebx; ret 4
> 0x7c920497 : pop edi; mov esp, ebp; pop ebp; ret
> 0x7c927e1d : pop edi; pop ebx; pop esi; pop ebp; ret 0x10
> 0x7c92d32c : pop edi; pop ebx; pop esi; pop ebp; ret 0xc
> 0x7c955c42 : pop edi; pop ebx; pop esi; pop ebp; ret 4
> 0x7c911bc0 : pop edi; pop ebx; pop esi; pop ebp; ret 8
> 0x7c90e880 : pop edi; pop ebx; xor eax, eax; ret
> 0x7c915262 : pop edi; pop esi; pop ebx; pop ebp; ret
> 0x7c91073b : pop edi; pop esi; pop ebx; pop ebp; ret 0x10
> 0x7c92ae41 : pop edi; pop esi; pop ebx; pop ebp; ret 0x14
> 0x7c920be0 : pop edi; pop esi; pop ebx; pop ebp; ret 0x18
> 0x7c964ec3 : pop edi; pop esi; pop ebx; pop ebp; ret 0x1c
> 0x7c917ba6 : pop edi; pop esi; pop ebx; pop ebp; ret 0x20
> 0x7c912229 : pop edi; pop esi; pop ebx; pop ebp; ret 0xc
> 0x7c928117 : pop edi; pop esi; pop ebx; pop ebp; ret 4
> 0x7c913477 : pop edi; pop esi; pop ebx; pop ebp; ret 8
> 0x7c97a74c : pop edi; setne al; pop esi; pop ebp; ret 0x10
> 0x7c9385a8 : pop esi; inc eax; pop ebx; pop ebp; ret 8
> 0x7c975aae : pop esi; mov eax, ebx; pop ebx; ret
> 0x7c956d63 : pop esi; mov eax, edx; pop ebp; ret 8
> 0x7c975489 : pop esi; mov eax, edx; pop ebx; ret
> 0x7c92043c : pop esi; mov esp, ebp; pop ebp; ret
> 0x7c903131 : pop esi; mov esp, ebp; pop ebp; ret 0x14
> 0x7c975d81 : pop esi; pop ebx; pop edi; pop ebp; ret 0x10
> 0x7c9682c0 : pop esi; pop ebx; pop edi; pop ebp; ret 0x1c
> 0x7c9206b7 : pop esi; pop ebx; pop edi; pop ebp; ret 0xc
> 0x7c93183b : pop esi; pop edi; pop ebx; pop ebp; ret 0x10
> 0x7c90ebb1 : pop esi; pop edi; pop ebx; pop ebp; ret 0xc
> 0x7c901929 : pop esi; xor eax, eax; pop ebx; ret
> 0x7c927be7 : pop esp; add [eax], al; ret
> 0x7c956f33 : pop eax; add [eax], eax; pop ebp; ret
> 0x7c95fa4c : pop eax; bound edx, [edx + 0x8ac0337c]; ret
> 0x7c9223b7 : pop eax; or [ebx + 0x5d], bl; ret 4
> 0x7c90eb2e : pop eax; pop ecx; pop ebp; pop ecx; pop ebx; ret 4
> 0x7c971975 : pop ebp; or [esi + 0xffffff8b], dl; ret
> 0x7c93f5c6 : pop ebp; shl [esi + 0xffffffc7], 0x45; ret 0x20
> 0x7c920496 : pop ebx; pop edi; mov esp, ebp; pop ebp; ret
> 0x7c956e70 : pop ecx; add [eax], eax; pop ebp; ret 0xc
> 0x7c956fa2 : pop ecx; mov eax, esi; pop esi; pop ebp; ret 0xc
> 0x7c956ef9 : pop edi; mov eax, edx; pop esi; pop ebp; ret
> 0x7c9105af : pop edi; mov eax, esi; pop esi; pop ebp; ret
> 0x7c933226 : pop edi; mov eax, esi; pop esi; pop ebp; ret 4
> 0x7c936c89 : pop edi; mov eax, esi; pop esi; pop ebp; ret 8
> 0x7c937e70 : pop edi; mov eax, esi; pop esi; pop ebx; ret
> 0x7c95f495 : pop edi; movzx eax, ax; pop esi; pop ebp; ret 4
> 0x7c975aad : pop edi; pop esi; mov eax, ebx; pop ebx; ret
> 0x7c956d62 : pop edi; pop esi; mov eax, edx; pop ebp; ret 8
> 0x7c975488 : pop edi; pop esi; mov eax, edx; pop ebx; ret
> 0x7c92043b : pop edi; pop esi; mov esp, ebp; pop ebp; ret
> 0x7c9182ba : pop edi; xor eax, eax; pop esi; pop ebp; ret 0xc
> 0x7c90fbdf : pop edx; add [eax], al; pop ebp; ret 4
> 0x7c956cfe : pop edx; add [eax], eax; pop ebp; ret 0x10
> 0x7c956d9c : pop edx; add [eax], eax; pop ebp; ret 0xc
> 0x7c9729dd : pop esi; fstp [ebx]; pop ebx; pop ebp; ret
> 0x7c96b811 : pop esi; mov al, 1; pop ebx; pop ebp; ret 0x10
> 0x7c91336b : pop esi; mov al, 1; pop ebx; pop ebp; ret 8
> 0x7c966b89 : pop esi; mov al, bl; pop ebx; pop ebp; ret 0x10
> 0x7c966975 : pop esi; mov al, bl; pop ebx; pop ebp; ret 0xc
> 0x7c96a42f : pop esi; mov al, bl; pop ebx; pop ebp; ret 4
> 0x7c970860 : pop esi; mov al, bl; pop ebx; pop ebp; ret 8
> 0x7c920594 : pop esi; mov eax, ebx; pop ebx; pop ebp; ret 0x10
> 0x7c9749e0 : pop esi; mov eax, ebx; pop ebx; pop ebp; ret 4
> 0x7c93343a : pop esi; mov eax, edi; pop edi; pop ebp; ret 4
> 0x7c90ea00 : pop esi; pop ebx; mov esp, ebp; pop ebp; ret
> 0x7c93957f : pop esi; pop ebx; mov esp, ebp; pop ebp; ret 0x14
> 0x7c97cdee : pop esi; pop ebx; mov esp, ebp; pop ebp; ret 0xc
> 0x7c90e7b2 : pop esi; pop ebx; pop edi; xor eax, eax; ret
> 0x7c90e87f : pop esi; pop edi; pop ebx; xor eax, eax; ret
> 0x7c93575e : pop esi; sar eax, 1; pop ebx; pop ebp; ret
> 0x7c921527 : pop esi; xor eax, eax; pop ebx; pop ebp; ret 0x10
> 0x7c90ed26 : pop esi; xor eax, eax; pop ebx; pop ebp; ret 0x14
> 0x7c93152e : pop esi; xor eax, eax; pop ebx; pop ebp; ret 0xc
> 0x7c9524be : pop esi; xor eax, eax; pop ebx; pop ebp; ret 4
> 0x7c9032af : pop fs:[0]; mov esp, ebp; pop ebp; ret 0x14
> 0x7c922636 : pop eax; call [edi + 0xc033017c]; pop edi; pop esi; ret
> 0x7c93dea9 : pop ebp; call [ebx + 0x56]
> 0x7c96e1c1 : pop ebp; or [edi + 0x33], dl; push esi; ret
> 0x7c92043a : pop ebx; pop edi; pop esi; mov esp, ebp; pop ebp; ret
> 0x7c913fd3 : pop ecx; idiv edi; jmp [esi + 0xffffff83]
> 0x7c956fa1 : pop ecx; pop ecx; mov eax, esi; pop esi; pop ebp; ret 0xc
> 0x7c901cef : pop edi; lea eax, [edx + 0xffffffff]; pop ebx; ret
> 0x7c97ab4a : pop edi; mov [edx], ecx; pop esi; pop ebp; ret 0x10
> 0x7c9600f7 : pop edi; mov [edx], ecx; pop esi; pop ebp; ret 0xc
> 0x7c96d0aa : pop edi; mov al, 1; pop esi; pop ebx; pop ebp; ret 8
> 0x7c95d913 : pop edi; mov eax, ebx; pop ebx; pop esi; pop ebp; ret 0x24
> 0x7c91f6d6 : pop edi; mov eax, esi; pop esi; pop ebx; pop ebp; ret 0x10
> 0x7c97aca3 : pop edi; mov eax, esi; pop esi; pop ebx; pop ebp; ret 4
> 0x7c9729dc : pop edi; pop esi; fstp [ebx]; pop ebx; pop ebp; ret