ropshell> use 911ddf2e16761643a47225f654d811e5 (download)
name         : ntdll.dll (i386/PE)
base address : 0x7c901000
total gadgets: 6968

ropshell> search pop ?
found 7 gadgets
> 0x7c90e504 : pop ebp; ret
> 0x7c90192c : pop ebx; ret
> 0x7c96d53a : pop ecx; ret
> 0x7c902486 : pop edi; ret
> 0x7c90137d : pop edx; ret
> 0x7c901d52 : pop esi; ret
> 0x7c9396b4 : pop es; ret