ropshell> use f1066e2543d511b6540dab8925034363 (download) name : ntdll.dll (i386/RAW) base address : 0x0 total gadgets: 11366
ropshell> suggest "load reg" > 0x00067182 : pop eax; ret > 0x0002825b : pop ebx; ret > 0x000170e1 : pop ecx; ret > 0x00017a89 : pop edx; ret > 0x00022471 : pop esi; ret > 0x000304b4 : pop edi; ret > 0x0001bcba : pop ebp; ret > 0x00090f57 : pop esp; ret > 0x000d6afc : popal ; ret > 0x000702ab : mov eax, [esp + 4]; ret > 0x00070f56 : mov ecx, [esp + 4]; sub eax, ecx; ret > 0x0007e402 : mov edx, [esp + 0x1c]; cmpxchg8b [ebp]; pop ebp; pop ebx; ret 0x14 > 0x0007de51 : mov edi, [esp + 8]; mov ecx, [esp + 0xc]; mov eax, [esp + 0x10]; shr ecx, 2; rep stosd es:[edi], eax; pop edi; ret 0xc